GCVE-110-NCSC-2025-100

Advisory PublishedCVSS 3.7/10

Vulnetix · Advisory published March 27, 2025

GitLab heeft kwetsbaarheden verholpen in GitLab EE/CE (Specifiek voor versies van 13.5.0 tot 17.10.1).

Weaknesses (CWE)

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-863Incorrect Authorization

Risk Scores

CVSS 3.1

3.7/10

Low · CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
GitLab	vers:semver/17.9\|<17.9.3	—	—
GitLab	vers:semver/13.5.0\|<17.8.6	—	—
GitLab	vers:semver/17.7\|<17.8.6	—	—
GitLab	vers:semver/17.10\|<17.10.1	—	—
Open Source	vers:unknown/<17.10.1	—	—
GitLab	vers:semver/17.4\|<17.8.6	—	—
Open Source	vers:unknown/<17.8.6	—	—
Open Source	vers:unknown/<17.9.3	—	—
GitLab	vers:semver/14.9\|<17.8.6	—	—

Aliases

CVE-2024-10307 CVE-2024-12619 CVE-2024-9773 CVE-2025-0811 CVE-2025-2242 CVE-2025-2255

References

advisory

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON