CVE-2025-5195 Authorization Bypass Through User-Controlled Key in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure...

CVE-2025-5195

CVE-2025-5195 affects GitLab CE/EE across all versions 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. The issue allows authenticated users to access arbitrary compliance frameworks, resulting in unauthorized data disclosure. The vulnerability is described across multiple sourc...

CVE-2024-10925 Authorization Bypass Through User-Controlled Key in GitLab

A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows a Guest user to read Security policy YAML...