VDB

CVE-2025-7734

CVE-2025-7734 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content.

EPSS 0.08% · 24.4th percentile

Risk Scores

EPSS Score
0.08%
24.4th percentile

Affected Products

VendorProductVersions
Bitnamigitlab14.2.0, 18.1.0, 18.2.0
Bitnamigitlab14.2.0, 18.1.0, 18.2.0

Timeline

  • Aug 12, 2025 CVE Published
  • Aug 13, 2025 CVE Updated
  • Aug 14, 2025 EPSS Score
  • Aug 18, 2025 PoC Published
  • Aug 18, 2025 PoC Published
  • Aug 18, 2025 PoC Published
  • Aug 18, 2025 PoC Published
  • Aug 18, 2025 PoC Published
  • Aug 22, 2025 EPSS Score
  • Aug 30, 2025 EPSS Score
  • Sep 8, 2025 EPSS Score
  • Sep 16, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›