VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Apr 10, 2025· Updated Jun 17, 2026

CVE-2025-0362

CVE-2025-0362

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.

Affected products

6
  • GitLab Inc./GitLabv54 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 7.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=7.7.0,<17.8.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=7.7.0,<17.8.7
    • (no CPE)range: from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 7.7.0, < 17.10.4

Patches

Vulnerability mechanics

References

2

News mentions

1