VDB

CVE-2025-0475

CVE-2025-0475 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.

EPSS 0.76% · 73.7th percentile

Risk Scores

EPSS Score
0.76%
73.7th percentile

Affected Products

VendorProductVersions
Bitnamigitlab15.10.0
Bitnamigitlab15.10.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Feb 26, 2025 CVE Published
  • Mar 3, 2025 Coalition ESS Score
  • Mar 4, 2025 EPSS Score
  • Mar 6, 2025 CVE Updated
  • Mar 7, 2025 Coalition ESS Score
  • Mar 18, 2025 EPSS Score
  • Apr 1, 2025 EPSS Score
  • Apr 14, 2025 EPSS Score
  • Apr 28, 2025 EPSS Score
  • May 12, 2025 EPSS Score
  • May 26, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›