CVE-2025-2255

🗓️ 27 Mar 2025 12:30:47Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 13 Views

Vulnerability in Gitlab AppSec allows Cross-Site Scripting attacks in specified versions.

Reporter	Title	Published	Views	Family All 19
FreeBSD	Gitlab -- Vulnerabilities	26 Mar 202500:00	–	freebsd
BDU FSTEC	The vulnerability of the Application Security (AppSec) module of a software platform based on Git for collaborative code development on GitLab allows attackers to perform cross-site scripting attacks.	30 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-2255	27 Mar 202513:26	–	circl
CNNVD	GitLab Enterprise Edition（EE）和GitLab Community Edition（CE）跨站脚本漏洞	27 Mar 202500:00	–	cnnvd
CVE	CVE-2025-2255	27 Mar 202512:30	–	cve
Cvelist	CVE-2025-2255 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab	27 Mar 202512:30	–	cvelist
EUVD	EUVD-2025-8413	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : Gitlab -- Vulnerabilities (1daa2814-0a6c-11f0-b4e4-2cf05da270f3)	27 Mar 202500:00	–	nessus
Tenable Nessus	GitLab 13.5.0 < 17.8.6 / 17.9 < 17.9.3 / 17.10 < 17.10.1 (CVE-2025-2255)	28 Mar 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-2255	30 Aug 202500:00	–	nessus

27 Mar 2025 12:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4 - 8.7

EPSS0.0028

SSVC

cve-2025-2255 gitlab appsec vulnerability cross-site scripting