An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email addresses.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/515381 | Broken Link |
| https://hackerone.com/reports/2956315 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2025, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://hackerone.com/reports/2956315 - Permissions Required | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/515381 - Broken Link | |
| First Time |
Gitlab gitlab
Gitlab |
|
| CPE | cpe:2.3:a:gitlab:gitlab:18.2:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:18.2:*:*:*:enterprise:*:*:* |
24 Jul 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-24 07:15
Updated : 2025-08-08 18:26
NVD link : CVE-2025-0765
Mitre link : CVE-2025-0765
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-863
Incorrect Authorization