CVE-2025-11340 – Incorrect Authorization in GitLab

CVE ID : CVE-2025-11340

Published : Oct. 9, 2025, 12:15 p.m. | 22 minutes ago

Description : GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

Severity: 7.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…