ID |
CVE-2025-5069
|
Sažetak |
An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's project. |
Reference |
|
CVSS |
Base: | 3.5 |
Impact: | 1.4 |
Exploitability: | 2.1 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
LOW |
LOW |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
LOW |
NONE |
NONE |
|
CVSS vektor |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
Zadnje važnije ažuriranje |
29-09-2025 - 13:12 |
Objavljeno |
26-09-2025 - 10:15 |