CVE-2025-5121

CVE-2025-5121 An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed com… https://t.co/rXXvF4gqb8

[CVE-2025-5121: HIGH] GitLab CE/EE versions 17.11 prior to 17.11.4 & 18.0 prior to 18.0.2 have a vulnerability allowing unauthorized application of compliance frameworks to projects, impacting cyber security.#cve,CVE-2025-5121,#cybersecurity https://t.co/9Qj9XA3RCP https://t.

🚨 GitLab opravuje závažnou zranitelnost, která umožňuje převzetí cizích účtů. Šlo o HTML injection, kdy mohl útočník vložit škodlivý script do vyhledávacího pole. Poslední aktualizace mimo jiné opravuje i řadu dalších chyb včetně zranitelnosti CVE-2

🗞️ GitLab has patched high-severity vulnerabilities, including an HTML injection flaw (CVE-2025-4278) that allows account takeovers and a missing authentication issue (CVE-2025-5121) that enables malicious CI/CD job injections. Admins are urged to upgrade. Key takeaways:

GitLab has released security patches for versions 18.0.2, 17.11.4, and 17.10.8 to fix critical vulnerabilities, including account takeover via HTML injection (CVE-2025-4278) and malicious CI/CD job injections (CVE-2025-5121). Stay updated! 🔒 #GitLab #Se… https://t.co/vGyM6jK