VDB
CVE-2025-7734
CVE-2025-7734
PUBLISHED
CVSS 5.400000095367432 MEDIUM
An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content.
EPSS 0.32% · 23.6th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.32%
23.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 14.2.0, 18.1.0, 18.2.0 |
| Bitnami | gitlab | 14.2.0, 18.1.0, 18.2.0 |
Timeline
- Aug 12, 2025 CVE Published
- Aug 14, 2025 EPSS Score
- Aug 18, 2025 PoC Published
- Aug 18, 2025 PoC Published
- Aug 18, 2025 PoC Published
- Aug 18, 2025 PoC Published
- Aug 18, 2025 PoC Published
- Aug 23, 2025 EPSS Score
- Sep 1, 2025 EPSS Score
- Sep 10, 2025 EPSS Score
- Sep 19, 2025 EPSS Score
- Sep 28, 2025 EPSS Score