VDB

CVE-2025-1212

CVE-2025-1212 PUBLISHED

An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.

EPSS 0.03% · 9.1th percentile

Risk Scores

EPSS Score
0.03%
9.1th percentile

Affected Products

VendorProductVersions
Bitnamigitlab8.3.0
Bitnamigitlab8.3.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Feb 11, 2025 CVE Published
  • Feb 12, 2025 PoC Published
  • Feb 12, 2025 PoC Published
  • Feb 13, 2025 EPSS Score
  • Feb 20, 2025 Coalition ESS Score
  • Feb 27, 2025 EPSS Score
  • Mar 5, 2025 CVE Updated
  • Mar 14, 2025 EPSS Score
  • Mar 28, 2025 EPSS Score
  • Apr 12, 2025 EPSS Score
  • Apr 26, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›