VDB
CVE-2025-11224
CVE-2025-11224
PUBLISHED
CVSS 5.400000095367432 MEDIUM
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality.
EPSS 0.33% · 24.5th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.33%
24.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 18.4.0, 18.5.0, 15.10.0 |
| Bitnami | gitlab | 15.10.0, 18.4.0, 18.5.0 |
Timeline
- Nov 12, 2025 CVE Published
- Nov 13, 2025 PoC Published
- Nov 13, 2025 PoC Published
- Jan 14, 2026 PoC Published
- Jan 14, 2026 PoC Published
- Jan 14, 2026 CVE Updated
- Jan 15, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 22, 2026 EPSS Score
- Jan 26, 2026 EPSS Score
- Jan 30, 2026 EPSS Score
- Feb 2, 2026 EPSS Score