Threats tagged 'bit-gitlab-2025-7734'

A cross-site scripting (XSS) vulnerability exists in GitLab CE/EE versions from 14.2 up to but not including 18.0.6, 18.1 up to but not including 18.1.4, and 18.2 up to but not including 18.2.2. This flaw could allow an attacker to inject malicious content and perform actions on behalf of users under certain conditions. The issue has been assigned CVE-2025-7734 and is rated with high severity. A patch is available to address this vulnerability.