Threats tagged 'bit-gitlab-2025-2242'

An improper access control vulnerability in GitLab CE/EE allows users who were previously instance administrators but have been downgraded to regular users to retain elevated privileges on groups and projects. This affects versions from 17.4 up to but not including 17.10.1. The issue has been addressed in versions 17.8.6, 17.9.3, and 17.10.1.