CVE-2025-0376

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-0376

Severity

8.7

High

CVSS V3

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Description

An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page.

References

https://images.chainguard.dev/security/CGA-mj94-qwj4-j235
https://images.chainguard.dev/security/CGA-mfqq-mq87-w6pj
https://github.com/advisories/GHSA-8rmw-8cch-2w5c
https://images.chainguard.dev/security/CGA-hjww-2mr2-6pcw
https://images.chainguard.dev/security/CGA-632c-5qq6-69g5
https://images.chainguard.dev/security/CGA-q7rh-7fpp-7fcq
https://images.chainguard.dev/security/CGA-73m3-64mq-m94c
https://images.chainguard.dev/security/CGA-x4hf-5249-r4x8
https://images.chainguard.dev/security/CGA-6mxv-44p3-qwp7
https://images.chainguard.dev/security/CGA-92c3-wf4m-xvwh
https://images.chainguard.dev/security/CGA-7mvc-cwr4-qjrq
https://images.chainguard.dev/security/CGA-575h-ccvg-638g
https://images.chainguard.dev/security/CGA-hvp6-j259-p73h
https://images.chainguard.dev/security/CGA-7gjh-5g75-v678
https://images.chainguard.dev/security/CGA-7965-v663-28g7
https://images.chainguard.dev/security/CGA-j64q-pj3m-v353
https://images.chainguard.dev/security/CGA-66h5-28f4-22rv
https://images.chainguard.dev/security/CGA-86cm-q3g8-wv5m
https://images.chainguard.dev/security/CGA-4qgx-qx5p-r42c
https://images.chainguard.dev/security/CGA-q523-62jp-5q59
https://images.chainguard.dev/security/CGA-84f9-829m-8j5g
https://images.chainguard.dev/security/CGA-mmv7-cxjm-87rp
https://images.chainguard.dev/security/CGA-jcvj-p6qw-3q6p
https://images.chainguard.dev/security/CGA-rqjf-vx6q-mwqr
https://images.chainguard.dev/security/CGA-vpwv-jfj2-pvcc
https://images.chainguard.dev/security/CGA-cc53-hw4c-xhw9
https://images.chainguard.dev/security/CGA-vp4m-8hvh-9mw2
https://images.chainguard.dev/security/CGA-h8gq-r825-24c9
https://images.chainguard.dev/security/CGA-8x3m-pg4h-f38q
https://images.chainguard.dev/security/CGA-84hg-g2qp-43fw
https://images.chainguard.dev/security/CGA-8hcg-c8vc-3pcg
https://images.chainguard.dev/security/CGA-mgv3-h58j-h64g
https://images.chainguard.dev/security/CGA-mjf5-56cp-mjh8
https://images.chainguard.dev/security/CGA-6pqc-w5vp-7pqp
https://images.chainguard.dev/security/CGA-j2f5-9pc6-xqmp
https://images.chainguard.dev/security/CGA-qpv9-27xv-gvhx
https://images.chainguard.dev/security/CGA-xxmm-2qm9-x5r5
https://images.chainguard.dev/security/CGA-x8xj-mxgm-7h9x
https://images.chainguard.dev/security/CGA-rjh7-3w9m-89gv
https://images.chainguard.dev/security/CGA-c379-6q7p-wc94
https://images.chainguard.dev/security/CGA-jj8p-92hp-j8p8
https://images.chainguard.dev/security/CGA-c8jm-2gxj-r3m4
https://images.chainguard.dev/security/CGA-vgf7-22r3-g7c4
https://images.chainguard.dev/security/CGA-3598-pcm5-mvhq
https://images.chainguard.dev/security/CGA-pwch-h4fm-rqvx
https://images.chainguard.dev/security/CGA-mwhj-vv66-j98g
https://images.chainguard.dev/security/CGA-xxg7-9r5x-37pf
https://images.chainguard.dev/security/CGA-h9q2-fgqw-g5g9
https://images.chainguard.dev/security/CGA-w25m-rf58-x4f3
https://images.chainguard.dev/security/CGA-8phr-hxpw-v82q
https://images.chainguard.dev/security/CGA-8m46-4m2r-97qh
https://images.chainguard.dev/security/CGA-g67w-7cfr-f2wc
https://images.chainguard.dev/security/CGA-6qh2-c2mm-5463
https://images.chainguard.dev/security/CGA-hmc4-57qv-429p
https://images.chainguard.dev/security/CGA-3v5q-6p48-rg9q
https://images.chainguard.dev/security/CGA-6h4c-rj3q-jprc
https://images.chainguard.dev/security/CGA-3f9q-6jx3-9xqr
https://images.chainguard.dev/security/CGA-4746-8cw2-j464
https://images.chainguard.dev/security/CGA-5h54-6cm5-gqrx
https://images.chainguard.dev/security/CGA-844g-qjv8-6mpx
https://images.chainguard.dev/security/CGA-c93j-8q7v-wm5w
https://images.chainguard.dev/security/CGA-6h54-p93h-w2w2
https://images.chainguard.dev/security/CGA-hm83-8q93-962w
https://images.chainguard.dev/security/CGA-q5gr-27j3-28mr
https://images.chainguard.dev/security/CGA-8m86-fcrq-h59c
https://images.chainguard.dev/security/CGA-5ccg-jcxc-q7jr
https://images.chainguard.dev/security/CGA-7f8p-5jj7-qh32
https://images.chainguard.dev/security/CGA-7xw6-qv79-j8vc
https://images.chainguard.dev/security/CGA-2xq2-h288-wqgm
https://images.chainguard.dev/security/CGA-68r9-c86m-h27q
https://images.chainguard.dev/security/CGA-xmgq-587h-m2c3
https://images.chainguard.dev/security/CGA-h534-55mf-gm2h
https://images.chainguard.dev/security/CGA-3m4r-rjhw-78h5
https://images.chainguard.dev/security/CGA-86mr-5rrp-q9f3
https://images.chainguard.dev/security/CGA-cvxj-8qvj-f354
https://images.chainguard.dev/security/CGA-423g-mwj8-xqhr
https://images.chainguard.dev/security/CGA-mx7f-qv29-55xp
https://images.chainguard.dev/security/CGA-p3hg-fv22-gj8c
https://images.chainguard.dev/security/CGA-mf2c-fmq6-wrcw
https://images.chainguard.dev/security/CGA-3xw6-f3rx-jgg8
https://images.chainguard.dev/security/CGA-x7fp-vr49-vgpw
https://images.chainguard.dev/security/CGA-3pqp-r93j-4fx4
https://images.chainguard.dev/security/CGA-frc5-j6q9-hph8
https://images.chainguard.dev/security/CGA-cjgh-p3g9-4jmw
https://images.chainguard.dev/security/CGA-89hx-cc7m-f2g9
https://images.chainguard.dev/security/CGA-4gqr-755x-5c2v
https://images.chainguard.dev/security/git%3A%2F%2Fgit%40gitlab.com%3Agitlab-org%2Fgitlab.git
https://gitlab.com/gitlab-org/gitlab/-/issues/512603
https://hackerone.com/reports/2930243

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2025-0376

Severity

Summary

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company