CVE-2025-4278 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2. Under certain conditions html injection in new search page could lead to ac…
Published: 2025-06-12 · CVSS: 8.7 · CVSS 3.1
An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2. Under certain conditions html injection in new search page could lead to account takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7