GitLab
0 remedies
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*, +2 more
0 remedies
- >= 18.0, < 18.0.2
GitLab CE/EE HTML Injection Vulnerability in Search Page Leading to Account Takeover
Vulnerability
A vulnerability allowing HTML injection has been identified in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 18.0 prior to 18.0.2. This issue arises under certain conditions on the new search page, where the injected HTML could be exploited to take over user accounts.
Impact
Exploitation of this vulnerability could result in unauthorized account access, allowing an attacker to assume control of the affected user’s account.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
7.3impact
5.4exploitability
5.0remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.