CVE-2025-1042

Summary

CVE-2025-1042 is an insecure direct object reference vulnerability affecting GitLab Enterprise Edition (EE). This issue, present in all versions from 15.7 to 17.8 prior to specific patches, enables unauthorized access to repositories. An attacker could exploit this vulnerability to view sensitive data without proper authorization. This defect poses a significant risk to organizations using the affected GitLab EE versions and requires prompt patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.