CVE-2025-12029
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certain circumstances, allowed an unauthenticated user to perform unauthorized actions on behalf of another user by injecting malicious external scripts into the Swagger UI."
Summary dbcve.org
This is a stored Cross-Site Scripting (XSS) vulnerability in GitLab's Swagger UI that allows an unauthenticated attacker to inject malicious external scripts. When an authenticated user accesses the Swagger UI, these scripts execute in their session, enabling the attacker to perform unauthorized actions on behalf of that user (essentially a CSRF attack vector).
Mitigation
Upgrade GitLab to versions 18.4.6, 18.5.4, 18.6.2 or later. If immediate patching is not feasible, consider disabling or restricting access to the Swagger UI until the upgrade can be completed.