{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T20:36:33.798","vulnerabilities":[{"cve":{"id":"CVE-2025-2045","sourceIdentifier":"cve@gitlab.com","published":"2025-03-06T13:15:12.553","lastModified":"2026-06-17T09:06:11.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1  allow users with limited permissions to access to potentially sensitive project analytics data."},{"lang":"es","value":"La autorización incorrecta en GitLab EE que afecta a todas las versiones desde la 17.7 anterior a la 17.7.6, la 17.8 anterior a la 17.8.4 y la 17.9 anterior a la 17.9.1 permite a los usuarios con permisos limitados acceder a datos de análisis de proyectos potencialmente confidenciales."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"GitLab","product":"GitLab","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"git://git@gitlab.com:gitlab-org/gitlab.git","versions":[{"version":"17.7.0","lessThan":"17.7.6","versionType":"semver","status":"affected"},{"version":"17.8","lessThan":"17.8.4","versionType":"semver","status":"affected"},{"version":"17.9","lessThan":"17.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-06T16:07:06.235439Z","id":"CVE-2025-2045","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@gitlab.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"17.7.0","versionEndExcluding":"17.7.6","matchCriteriaId":"8E917B5A-660A-496F-A300-7870ABBDDA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"17.8.0","versionEndExcluding":"17.8.4","matchCriteriaId":"BBA524F8-D246-4E22-AD19-D5A7A73BAFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:17.9.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"520D3C67-BAA9-49B0-8613-7DC0127499D3"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/512050","source":"cve@gitlab.com","tags":["Exploit","Issue Tracking"]},{"url":"https://hackerone.com/reports/2921111","source":"cve@gitlab.com","tags":["Permissions Required"]}]}}]}