Description
An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term."
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 17.1 – < 17.8.7, 17.9 – < 17.9.6, 17.10 – < 17.10.4 | 17.8.7 |
Advisories 1
- WID-SEC-2025-0778 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 9, 2025
References
- GitLab Issue #503722 issue-tracking permissions-required
- HackerOne Bug Bounty Report #2717400 technical-description exploit permissions-required