Boletines de Vulnerabilidades

CVE-2025-0475

   
Software afectado GITLAB
 
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-0475