CVE-2025-1763 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting…
Published: 2025-05-30 · CVSS: 8.7 · CVSS 3.1
An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7