CVE-2025-1110 — Insufficient Granularity of Access Control in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via …
Published: 2025-05-22 · CVSS: 2.7 · CVSS 3.1
An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via a crafted GraphQL query.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7