CVE-2025-0765CWE-863

Incorrect Authorization in GitLab

Medium · published July 24, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email addresses.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-07-24T06:33Z
EPSS history
Timeline
  • 24 JUL 06:33Z
    Incorrect Authorization in GitLab
    cvelistv5