NetSight
medium4.3

CVE-2025-2045

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permi…

Impact

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

Affected products

VendorProductAffected versions
GitlabGitlab
from 17.7.0 before 17.7.6
from 17.8.0 before 17.8.4
Version 17.9.0

Weakness classification

References