Threats tagged 'bit-gitlab-2026-7377'

A cross-site scripting (XSS) vulnerability exists in GitLab EE versions 18.7 up to but not including 18.9.7, 18.10 up to but not including 18.10.6, and 18.11 up to but not including 18.11.3. This issue occurs in customizable analytics dashboards where improper input sanitization allows an authenticated user to execute arbitrary JavaScript in other users' browsers. The vulnerability has been remediated in later versions.