A cross-site scripting (XSS) vulnerability exists in GitLab versions 15.11 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. This flaw allows attackers to inject malicious scripts into web pages, potentially enabling the exfiltration of sensitive user information. The vulnerability has been assigned CVE-2024-4835 and is rated with high severity. Official patches addressing this issue are available in versions 16.10.6, 16.11.3, and 17.0.1.