GCVE-110-NCSC-2025-176

Advisory PublishedCVSS 4.3/10

Vulnetix · Advisory published May 23, 2025

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Weaknesses (CWE)

CWE-1390Weak AuthenticationCWE-359Exposure of Private Personal Information to an Unauthorized ActorCWE-770Allocation of Resources Without Limits or ThrottlingCWE-1220Insufficient Granularity of Access ControlCWE-1288Improper Validation of Consistency within Input

Risk Scores

CVSS 3.1

4.3/10

Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions	Platforms
GitLab	vers:unknown/17.10.4	—	—
GitLab	vers:unknown/17.10.5	—	—
GitLab	vers:unknown/17.11.0	—	—
GitLab	vers:unknown/17.10.6	—	—
GitLab	vers:unknown/17.10.2	—	—
GitLab	vers:unknown/17.10.0	—	—
GitLab	vers:unknown/17.11.1	—	—
GitLab	vers:unknown/17.10.1	—	—
GitLab	vers:unknown/17.11.2	—	—
GitLab	vers:unknown/17.10.3	—	—
GitLab	vers:unknown/18.0	—	—

Aliases

CVE-2024-12093 CVE-2024-7803 CVE-2024-9163 CVE-2025-0605 CVE-2025-0679 CVE-2025-0993 CVE-2025-1110 CVE-2025-2853 CVE-2025-3111 CVE-2025-4979

References

advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON