vulnerability
FreeBSD: VID-11b71871-20ba-11f0-9471-2cf05da270f3 (CVE-2025-1908): Gitlab -- Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:H/Au:S/C:C/I:C/A:N) | Apr 24, 2025 | Apr 25, 2025 | Mar 25, 2026 |
Severity
7
CVSS
(AV:N/AC:H/Au:S/C:C/I:C/A:N)
Published
Apr 24, 2025
Added
Apr 25, 2025
Modified
Mar 25, 2026
Description
Gitlab reports: Cross Site Scripting (XSS) in Maven Dependency Proxy through CSP directives Cross Site Scripting (XSS) in Maven dependency proxy through cache headers Network Error Logging (NEL) Header Injection in Maven Dependency Proxy Allows Browser Activity Monitoring Denial of service (DOS) via issue preview Unauthorized access to branch names when Repository assets are disabled in the project
Solutions
freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-gitlab-ee
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.