CVE-2025-10282CWE-200information-disclosure

CVE-2025-10282

Medium · published October 9, 2025

CVSS v3.1

4.7

EPSS

Percentile

13.1

In the wild

Unconfirmed

What it is

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

The record

Technical detail

CVSS v3.1: 4.7 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00230 · 13.1th percentile
Weakness: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published: 2025-10-09T20:15Z

References (1)

EPSS history

Timeline