Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2025-6186

CVSS 3.1
5.4 medium
EPSS
<1%p23
Published
·
Modified
Analyze CVE-2025-6186 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names.

Vendors
gitlab
Products
gitlab
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story