Threats tagged 'bit-gitlab-2025-13761'

A critical cross-site scripting (XSS) vulnerability exists in GitLab Community and Enterprise Editions affecting versions from 18.6 up to but not including 18.6.3, and 18.7 up to but not including 18.7.1. This vulnerability could allow an unauthenticated attacker to execute arbitrary code in the context of an authenticated user's browser by tricking the user into visiting a specially crafted webpage. GitLab has remediated this issue in versions 18.6.3 and 18.7.1.