CVSS 3.0
7.2 highCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2017-0925
High (7.2). EPSS 0.9% chance of exploitation in the next 30 days.
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-319, CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- gitlab:gitlab