This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] GitLab CE/EE fixes 10 vulnerabilities
GitLab versions 18.4.1, 18.3.3 and 18.2.7 fix 10 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). The most severe ones are described below, the full list can be found at [1].
Allows an authenticated remote attacker to perform an XSS attack in GitLab CE/EE under certain conditions [1].
The vulnerability is present in products:
- GitLab Community Edition; >=14.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
- GitLab Enterprise Edition; >=14.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
More information:
- CVE-2025-9642 at cve.org, NVD
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
Allows an unauthenticated remote attacker to perform a DoS attack in GitLab CE/EE by sending specially crafted JSON files [1].
The vulnerability is present in products:
- GitLab Community Edition; <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
- GitLab Enterprise Edition; <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2025-10858 at cve.org, NVD
- CWE-770: Allocation of Resources Without Limits or Throttling at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
Allows an unauthenticated remote attacker to bypass query complexity limits and perform a DoS attack in GitLab CE/EE [1].
The vulnerability is present in products:
- GitLab Community Edition; >=11.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
- GitLab Enterprise Edition; >=11.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2025-8014 at cve.org, NVD
- CWE-770: Allocation of Resources Without Limits or Throttling at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
Allows an authenticated remote attacker with low privileges to access sensitive information stored in virtual registry configurations in GitLab CE/EE [1].
The vulnerability is present in products:
- GitLab Community Edition; >=14.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
- GitLab Enterprise Edition; >=14.10, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
More information:
- CVE-2025-9958 at cve.org, NVD
- CWE-201: Insertion of Sensitive Information Into Sent Data at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
Allows an authenticated remote attacker with group management privileges to escalate privileges and gain access to additional system functions in GitLab EE [1].
The vulnerability is present in product:
- GitLab EE; >=16.6, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
More information:
- CVE-2025-7691 at cve.org, NVD
- CWE-267: Privilege Defined With Unsafe Actions at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
Allows an authenticated remote attacker to perform a DoS attack in GitLab CE/EE via specific GraphQL queries [1].
The vulnerability is present in products:
- GitLab Community Edition; >=17.2, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
- GitLab Enterprise Edition; >=17.2, <18.2.7; >=18.3, <18.3.3; >=18.4, <18.4.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
More information:
- CVE-2025-11042 at cve.org, NVD
- CWE-770: Allocation of Resources Without Limits or Throttling at cwe.mitre.org
The vulnerability was publicly disclosed 25. 9. 2025.
By CESNET, z.s.p.o. Michaela Jarošová on 30. 9. 2025.