vulnerability
FreeBSD: VID-ae028662-475e-11f0-9ca4-2cf05da270f3 (CVE-2025-4278): Gitlab -- Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:S/C:C/I:C/A:N) | Jun 12, 2025 | Jun 14, 2025 | Dec 10, 2025 |
Severity
8
CVSS
(AV:N/AC:M/Au:S/C:C/I:C/A:N)
Published
Jun 12, 2025
Added
Jun 14, 2025
Modified
Dec 10, 2025
Description
Gitlab reports: HTML injection impacts GitLab CE/EE Cross-site scripting issue impacts GitLab CE/EE Missing authorization issue impacts GitLab Ultimate EE Denial of Service impacts GitLab CE/EE Denial of Service via unbounded Webhook token names impacts GitLab CE/EE Denial of Service via unbounded Board Names impacts GitLab CE/EE Information disclosure issue impacts GitLab CE/EE Denial of Service (DoS) via uncontrolled HTTP Response Processing impacts GitLab CE/EE Information disclosure via authorization bypass impacts GitLab CE/EE Sensitive information disclosure via Group IP restriction bypass
Solutions
freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-gitlab-ee
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.