CVE-2025-0362 — UI Misrepresentation / Clickjacking in Gitlab

CWE-1021 — UI Misrepresentation / Clickjacking5 documents5 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 84.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
GitlabDebian GitlabGitlab CE
Timeline
PublishedApr 10

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5gitlab/gitlab7.7 — 17.8.7+2
▶NVDgitlab/gitlab7.7.0 — 17.8.7+2
▶debiandebian/gitlab
▶gitlabgitlab/gitlab

🔴Vulnerability Details

2
OSV
CVE-2025-0362: An issue has been discovered in GitLab CE/EE affecting all versions from 7↗2025-04-10
▶
GHSA
GHSA-r375-6xr6-qqjq: An issue has been discovered in GitLab CE/EE affecting all versions from 7↗2025-04-10
▶

📋Vendor Advisories

2
GitLab
CVE-2025-0362: An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certai↗2025-04-10
▶
Debian
CVE-2025-0362: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 bef...↗2025
▶