CVE-2025-0194

Published Jan 8, 2025

Last updated a month ago

CVSS medium 6.5

Overview

Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner.
Source
cve@gitlab.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.5
Impact score
5.2
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Severity
MEDIUM

Weaknesses

cve@gitlab.com
CWE-538

Social media

Hype score
Not currently trending

  1. CVE-2025-0194 Access Token Logging Vulnerability in GitLab API Requests A problem was found in GitLab CE/EE. It affects all versions from 17.4 before 17.5.1, from 17.6 before 17.6.1, and from 17.7 before 17.7.1. ... https://t.co/yofaqLmEpz

    @VulmonFeeds

    9 Jan 2025

    48 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References