Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data.
{
"cwe_ids": [
"CWE-863"
],
"cna_assigner": "GitLab",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0516.json"
}{
"cpe": [
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
],
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "17.7.0"
},
{
"fixed": "17.7.4"
},
{
"introduced": "17.8.0"
},
{
"fixed": "17.8.2"
}
]
}