CVE-2025-51308: Gatling

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks.

Affected products

• Gatling Gatling: before 1.25.0 (fixed in 1.25.0)

Published 2025-08-06. Last modified 2026-06-17.