NetSight
high8.7

CVE-2025-4700

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific c…

Impact

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to trigger unintended content rendering leading to XSS.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.10.0 before 18.0.5
from 18.1.0 before 18.1.3
Version 18.2

Weakness classification

References