NetSight
high8.7

CVE-2025-0314

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1.

Impact

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting.

Affected products

VendorProductAffected versions
GitlabGitlab
from 17.2.0 before 17.6.4
from 17.7.0 before 17.7.3
Version 17.8.0

Weakness classification

References