vulnerability
FreeBSD: VID-11b71871-20ba-11f0-9471-2cf05da270f3 (CVE-2025-0639): Gitlab -- Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:N/I:N/A:C) | Apr 24, 2025 | Apr 25, 2025 | Dec 10, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
Apr 24, 2025
Added
Apr 25, 2025
Modified
Dec 10, 2025
Description
Gitlab reports: Cross Site Scripting (XSS) in Maven Dependency Proxy through CSP directives Cross Site Scripting (XSS) in Maven dependency proxy through cache headers Network Error Logging (NEL) Header Injection in Maven Dependency Proxy Allows Browser Activity Monitoring Denial of service (DOS) via issue preview Unauthorized access to branch names when Repository assets are disabled in the project
Solutions
freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-gitlab-ee
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.