CVE-2025-5101 | GitLab Community Edition/Enterprise Edition up to 18.1.4/18.2.4/18.3.0 Web Interface code injection (Issue 545165)

A vulnerability labeled as critical has been found in GitLab Community Edition and Enterprise Edition up to 18.1.4/18.2.4/18.3.0. This impacts an unknown function of the component Web Interface. The manipulation results in code injection.

This vulnerability is known as CVE-2025-5101. Attacking locally is a requirement. No exploit is available.

The affected component should be upgraded.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.VulDB Recent EntriesRead More