MEDIUM
CVE-2025-4700
CVSS
6.1
Description
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to trigger unintended content rendering leading to XSS.
Summary dbcve.org
GitLab CE/EE contains a stored XSS vulnerability where an attacker could inject malicious content that renders unexpectedly in the application interface, allowing script execution in other users' browsers.
Mitigation
Upgrade GitLab to version 18.0.5, 18.1.3, 18.2.1 or later to patch the XSS vulnerability.
Weakness (CWE)
CWE-79
Cross-site Scripting (XSS)
EPSS Score
0.24%
Probability of exploitation in next 30 days
14.8th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.