VDB
GCVE-110-NCSC-2025-87
GCVE-110-NCSC-2025-87
Advisory PublishedCVSS 2.7/10
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses (CWE)
CWE-863Incorrect AuthorizationCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-209Generation of Error Message Containing Sensitive InformationCWE-770Allocation of Resources Without Limits or ThrottlingCWE-347Improper Verification of Cryptographic SignatureCWE-94Improper Control of Generation of Code ('Code Injection')
Risk Scores
CVSS 3.1
2.7/10
Low · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| GitLab | vers:semver/<17.7.7 | — | — |
| GitLab | vers:semver/17.8|<17.8.5 | — | — |
| GitLab | vers:unknown/17.8.4 | — | — |
| GitLab | vers:unknown/17.7.3 | — | — |
| GitLab | vers:unknown/17.7.2 | — | — |
| GitLab | vers:unknown/17.9.0 | — | — |
| GitLab | vers:unknown/17.7.0 | — | — |
| GitLab | vers:unknown/17.8.3 | — | — |
| GitLab | vers:unknown/17.7.4 | — | — |
| GitLab | vers:unknown/17.7.1 | — | — |
| GitLab | vers:unknown/17.8.0 | — | — |
| GitLab | vers:semver/17.2|<17.7.7 | — | — |
| GitLab | vers:unknown/17.8.1 | — | — |
| GitLab | vers:semver/11.5|<17.7.7 | — | — |
| GitLab | vers:unknown/17.7.5 | — | — |
| GitLab | vers:semver/16.9|<17.7.7 | — | — |
| GitLab | vers:semver/12.3|<17.7.7 | — | — |
| GitLab | vers:semver/16.5|<17.7.7 | — | — |
| GitLab | vers:unknown/17.7.6 | — | — |
| GitLab | vers:unknown/17.9.1 | — | — |
| GitLab | vers:semver/17.9|<17.9.2 | — | — |
| GitLab | vers:unknown/17.8.2 | — | — |
Browse GCVE Records
74,267 records in the GCVE database · Updated July 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.