This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitLab CE/EE fixes 4 vulnerabilities

GitLab versions 18.1.2, 18.0.4 and 17.11.6 fix 4 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). The most severe of them are described below; the remaining vulnerabilities can be found at [1].

GitLab CE/EE - XSS (CVE-2025-6948)
CVSS 8.7 (High)

An authenticated remote attacker is, under certain conditions, allowed to carry out an XSS attack [1].

The vulnerability is present in products:

  • GitLab Community Edition; >=17.11, <17.11.6; >=18.0, <18.0.4; >=18.1, <18.1.2;
  • GitLab Enterprise Edition; >=17.11, <17.11.6; >=18.0, <18.0.4; >=18.1, <18.1.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

More information:

  • CVE-2025-6948 at cve.org, NVD
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org

The vulnerability was publicly disclosed 9. 7. 2025.

GitLab CE/EE - restriction bypass (CVE-2025-3396)
CVSS 4.3 (Medium)

An authenticated remote attacker who is a project owner is, by manipulating API requests, allowed to bypass certain group restrictions and create an unauthorized fork of the project [1].

The vulnerability is present in products:

  • GitLab Community Edition; >=13.3, <17.11.6; >=18.0, <18.0.4; >=18.1, <18.1.2;
  • GitLab Enterprise Edition; >=13.3, <17.11.6; >=18.0, <18.0.4; >=18.1, <18.1.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

More information:

The vulnerability was publicly disclosed 9. 7. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 15. 7. 2025.

CESNET, z.s.p.o. Logo