CVE-2025-5121 — Missing Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance f…
Published: 2025-06-20 · CVSS: 8.5 · CVSS 3.1
An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7