CWE-840 vulnerabilities

21 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.1	EPSS 0.3%	CVE-2025-2938GitLab · Business Logic Errors Low3.1EPSS 0.3%2025-06-26CVE Database V5CVE-2025-2938 CVE-2025-2938 is a business logic vulnerability in GitLab CE/EE that affects versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1. The flaw allows authenticated users to gain elevated project privileges due to unintended permission grants caused by role modifications during the approval process. This issue has been fixed in versions 17.11.5, 18.0.3, and 18.1.1. EPSS 0.3%Vulnerability CWE-840	CVE Database V5	2025-06-26

Page 2 of 2