CVE-2025-4278 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2. Under certain conditions html injection in new search page…
High CVSS: 8.7

CVE-2025-4278

An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2. Under certain conditions html injection in new search page could lead to account takeover.
Vendor
Gitlab
Product
Gitlab
CWE
CWE-80
Yayın Tarihi
2025-06-12 10:16:39
Güncelleme
2025-08-08 18:23:29
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

CWE-80 Gitlab HIGH Gitlab 2025

Referanslar

https://gitlab.com/gitlab-org/gitlab/-/issues/539198 https://hackerone.com/reports/3085738