MEDIUM

CVE-2025-0194

Gitlab GitLab 2025-01-08 CVSS v3.1

CVSS

6.5

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner.

Weakness (CWE)

CWE-538

EPSS Score

0.49%

Probability of exploitation in next 30 days

41th percentile

References

https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#possible-access-token-exposure-in-gitlab-logs Release Notes https://gitlab.com/gitlab-org/gitlab/-/issues/489459 Exploit, Issue Tracking, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE