CVE-2025-0314: GitLab

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting.

Affected products

• GitLab GitLab: from 17.2.0, before 17.6.4 (fixed in 17.6.4); from 17.7.0, before 17.7.3 (fixed in 17.7.3); version 17.8.0 only

Published 2025-01-24. Last modified 2026-06-17.