CVE-2025-6948

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.11 through 17.11.5 GitLab CE/EE versions 18.0 through 18.0.3 GitLab CE/EE versions 18.1 through 18.1.1

Description: An issue has been discovered in GitLab CE/EE that, under certain conditions, could allow an attacker to execute actions on behalf of users by injecting malicious content. Approximately 500,000 instances have been identified. The issue involves an authorization bypass due to Cross-Site Scripting (XSS).

Recommendations: Update to GitLab CE/EE version 17.11.6 or later. Update to GitLab CE/EE version 18.0.4 or later. Update to GitLab CE/EE version 18.1.2 or later.