CVE-2025-11989

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions...

EUVD-2025-35951

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions...

CVE-2025-11989

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to execute unauthorized quick actions by including malicious commands in specific descriptions...

CVE-2025-11989

Removed by vendor...

CVE-2025-11989

GitLab CVE-2025-11989 affects GitLab Enterprise Edition (EE) prior to patches for several tracks: 17.6.0 to before 18.3.5, 18.4 to before 18.4.3, and 18.5 to before 18.5.1. The vulnerability could allow an authenticated attacker to execute unauthorized quick actions by injecting malicious command...

PT-2025-43140

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.6.0 through 18.3.5 GitLab EE versions 18.4.0 through 18.4.2 GitLab EE versions 18.5.0 through 18.5.0 Description An authenticated attacker could execute unauthorized quick actions by including malicious commands in specif...