CVE-2025-5121 – GitLab Compliance Framework Authorization Bypass

CVE ID : CVE-2025-5121

Published : June 20, 2025, 6:15 p.m. | 4 hours, 29 minutes ago

Description : An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework’s group.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-6358 – Code-Projects Simple Pizza Ordering System SQL Injection Vulnerability

CVE ID : CVE-2025-6358

Published : June 20, 2025, 6:15 p.m. | 4 hours, 15 minutes ago

Description : A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saveorder.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2024-4994 – GitLab CSRF GraphQL Mutation Execution Vulnerability

CVE ID : CVE-2024-4994

Published : June 20, 2025, 7:15 p.m. | 3 hours, 29 minutes ago

Description : An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions starting from 17.1.0 before 17.1.1 which allowed for a CSRF attack on GitLab’s GraphQL API leading to the execution of arbitrary GraphQL mutations.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2024-4025 – “GitLab Markdown DoS Vulnerability”

CVE ID : CVE-2024-4025

Published : June 20, 2025, 7:15 p.m. | 3 hours, 14 minutes ago

Description : A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1. It is possible for an attacker to cause a denial of service using a crafted markdown page.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More