CVE-2025-2045

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-2045
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2045.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-2045
Published
2025-03-06T13:04:16.661Z
Modified
2025-12-05T08:55:20.963556Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Incorrect Authorization in GitLab
Details

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2045.json",
    "cwe_ids": [
        "CWE-863"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fd574ee5710155adf5307fba45132264dcb64a1
Fixed
69dcaacaca675fa2e5ff2408c08245d2512a8540
Database specific 
{
    "versions": [
        {
            "introduced": "17.7.0"
        },
        {
            "fixed": "17.7.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
f03594b9e09b648c839e9c008286a24c93c82373
Fixed
74ddb379313259093ab52fa5d9737008be42b8c2
Database specific 
{
    "versions": [
        {
            "introduced": "17.8"
        },
        {
            "fixed": "17.8.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
f5041566b342c2f30a8d63b8117272c454e18410
Fixed
8f67c219597bf9f13a8716776501f5bd708e2050
Database specific 
{
    "versions": [
        {
            "introduced": "17.9"
        },
        {
            "fixed": "17.9.1"
        }
    ]
}

Affected versions

v17.*

v17.7.0-ee
v17.7.1-ee
v17.7.2-ee
v17.7.3-ee
v17.7.4-ee
v17.7.5-ee
v17.8.0-ee
v17.8.1-ee
v17.8.2-ee
v17.8.3-ee
v17.9.0-ee