CVE-2025-0475
03.03.2025, 11:15
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 15.10.0 ≤ 𝑥 < 17.7.6 |
| gitlab | gitlab | 15.10.0 ≤ 𝑥 < 17.7.6 |
| gitlab | gitlab | 17.8.0 ≤ 𝑥 < 17.8.4 |
| gitlab | gitlab | 17.8.0 ≤ 𝑥 < 17.8.4 |
| gitlab | gitlab | 17.9.0 |
| gitlab | gitlab | 17.9.0 |
𝑥
= Vulnerable software versions
