Threats tagged 'bit-gitlab-2025-11224'

GitLab CE/EE versions from 15.10 up to but not including 18.3.6, 18.4 up to but not including 18.4.4, and 18.5 up to but not including 18.5.2 contain a stored cross-site scripting (XSS) vulnerability in the Kubernetes proxy functionality. This vulnerability allows an authenticated user to execute malicious scripts due to improper input validation during web page generation. The issue has been remediated in versions 18.3.6, 18.4.4, and 18.5.2 and later.