GitLab Community Edition/Enterprise Edition up to 17.9.6/17.10.4/17.11.0 logic error

Summaryinfo

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.9.6/17.10.4/17.11.0. It has been declared as problematic. The impacted element is an unknown function. The manipulation results in logic error. This vulnerability is known as CVE-2025-1908. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.9.6/17.10.4/17.11.0. It has been classified as problematic. Affected is some unknown processing. The manipulation with an unknown input leads to a logic error vulnerability. CWE is classifying the issue as CWE-840. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

The weakness was published by joaxcar. The advisory is shared for download at gitlab.com. This vulnerability is traded as CVE-2025-1908 since 03/03/2025. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 234797 (GitLab 16.6 < 17.9.7 / 17.10 < 17.10.5 / 17.11 < 17.11.1 (CVE-2025-1908)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 17.9.7, 17.10.5 or 17.11.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (234797). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Vendor

• GitLab

Name

• Community Edition
• Enterprise Edition

Version

• 17.0
• 17.1
• 17.2
• 17.3
• 17.4
• 17.5
• 17.6
• 17.7
• 17.8
• 17.9
• 17.9.0
• 17.9.1
• 17.9.2
• 17.9.3
• 17.9.4
• 17.9.5
• 17.9.6
• 17.10
• 17.10.0
• 17.10.1
• 17.10.2
• 17.10.3
• 17.10.4
• 17.11.0

License

• open-source

Website

• Vendor: https://gitlab.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion