High · published December 11, 2025
⚡ An authenticated user can unleash a sneaky HTML injection! This vulnerability in GitLab lets users perform unauthorized actions on behalf of others—yikes! 😱 Think of this like a restaurant where a customer can sneakily change the order on someone else's table. Instead of just their own meal, they could end up swapping dishes for everyone else, leading to a chaotic dinner! 🍽️ With this vulnerability, an attacker could manipulate GitLab's display to execute unauthorized actions, potentially compromising sensitive data or workflows. This could lead to unauthorized access to projects or even unwanted changes in critical codebases, making it a serious threat to teams relying on GitLab for collaboration.
Think of this like a restaurant where a customer can sneakily change the order on someone else's table. Instead of just their own meal, they could end up swapping dishes for everyone else, leading to a chaotic dinner! 🍽️ This vulnerability allows authenticated users to inject malicious HTML into the vulnerability code flow displays, enabling unauthorized actions on behalf of other users without their consent. Affected versions include GitLab CE/EE from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2.
With this vulnerability, an attacker could manipulate GitLab's display to execute unauthorized actions, potentially compromising sensitive data or workflows. This could lead to unauthorized access to projects or even unwanted changes in critical codebases, making it a serious threat to teams relying on GitLab for collaboration. To remediate this issue, immediately upgrade your GitLab instance to the fixed versions: 18.4.6, 18.5.4, or 18.6.2. Ensure you also review access controls and user permissions to minimize risks. Regularly monitor your instances for any unusual activities. You've got this! By following these steps, you'll keep your GitLab environment secure and your team safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gitlab/gitlab | ≥ 17.1.0, < 18.4.6 | 18.4.6 |
| gitlab/gitlab | ≥ 17.1.0, < 18.4.6 | 18.4.6 |
| gitlab/gitlab | ≥ 18.5.0, < 18.5.4 | 18.5.4 |
| gitlab/gitlab | ≥ 18.5.0, < 18.5.4 | 18.5.4 |
| gitlab/gitlab | ≥ 18.6.0, < 18.6.2 | 18.6.2 |
| gitlab/gitlab | ≥ 18.6.0, < 18.6.2 | 18.6.2 |