A cross-site scripting (XSS) vulnerability exists in GitLab CE/EE due to improper neutralization of input during web page generation. This affects versions from 17.7 up to but not including 17.8.6, 17.9 up to but not including 17.9.3, and 17.10 up to but not including 17.10.1. The issue arises from improper rendering of certain file types, which can lead to XSS attacks. A patch is available to address this vulnerability.