CVE-2025-10282

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

Score

CVSS 3.1 4.7 Medium

Status

Deferred - cves@blacklanternsecurity.com

Published

2025-10-09

Last modified

2026-10-08

Weaknesses

CWE-200

Affected products

• Bbot (Blsops Llc)

References

• https://blog.blacklanternsecurity.com/p/bbot-security-advisory-gitdumper