CVE-2025-14560

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.1 through 18.6.6 GitLab CE/EE versions 18.7 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4

Description An issue existed in GitLab CE/EE that, under specific circumstances, could allow an authenticated user to perform unauthorized actions as another user. This was possible through the injection of malicious content into the vulnerability code flow.

Recommendations Update GitLab CE/EE to version 18.6.7 or later. Update GitLab CE/EE to version 18.7.4 or later. Update GitLab CE/EE to version 18.8.4 or later.