High severity7.2NVD Advisory· Published Mar 21, 2018· Updated Jun 17, 2026

CVE-2017-0925

Description

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitLab Inc./gitlab-org/gitlab-eellm-create
Range: = 10.1.0
GitLab Inc./GitLab Enterprise Editionllm-fuzzy
Range: = 10.1.0
GitLab Inc./GitLab Community Editioncpe-rescue
Range: 8.10.6 - 10.1.5 Fixed in 10.1.6

Patches

Vulnerability mechanics

References

about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/nvdRelease NotesVendor Advisory
www.debian.org/security/2018/dsa-4145nvdThird Party Advisory
gitlab.com/gitlab-org/gitlab-ee/issues/3847nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000