This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] GitLab CE/EE fixes 5 vulnerabilities
GitLab fixes 5 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) with versions 17.9.1, 17.8.4 and 17.7.6 [1].
Under certain conditions, an authenticated remote attacker can perform an XSS attack in the Kubernetes proxy endpoint in GitLab CE/EE [1].
The vulnerability is present in products:
- *:GitLab Community Edition;>=15.10,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
- *:GitLab Enterprise Edition;>=15.10,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
More information:
- CVE-2025-0475 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 26. 2. 2025.
Under certain conditions, an authenticated remote attacker can perform an XSS attack in the Maven Dependency Proxy in GitLab EE [1].
The vulnerability is present in product:
- *:GitLab Enterprise Edition;>=16.6,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
More information:
- CVE-2025-0555 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 26. 2. 2025.
Under certain conditions, an authenticated remote attacker can perform an XSS attack in GitLab CE/EE [1].
The vulnerability is present in products:
- *:GitLab Community Edition;>=16.6,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
- *:GitLab Enterprise Edition;>=16.6,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
More information:
- CVE-2024-8186 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 26. 2. 2025.
Due to insufficient permission validation in GitLab EE, an authenticated remote attacker with the Guest role can read the Security Policy YAML without authorization [1].
The vulnerability is present in product:
- *:GitLab Enterprise Edition;>=16.2,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
More information:
- CVE-2024-10925 at cve.org, NVD
- CWE-285: Improper Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 26. 2. 2025.
Due to insufficient permission validation in GitLab EE, an authenticated remote attacker with the Planner role can read potentially sensitive code review analytics data in private projects without authorization [1].
The vulnerability is present in product:
- *:GitLab Enterprise Edition;>=17.7,<17.7.6;>=17.8,<17.8.4;>=17.9,<17.9.1;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2025-0307 at cve.org, NVD
- CWE-285: Improper Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 26. 2. 2025.
By CESNET, z.s.p.o. Michaela Ručková on 27. 2. 2025.