GitLab Releases Patch (CVE-2025-0314) for XSS Exploit

GitLab has released update for high severity cross-site scripting (XSS) flaw. Versions 17.8.1, 17.7.3, and 17.6.4 for both Community Edition (CE) and Enterprise Edition (EE) have been released to address these issues.

The CVE-2025-0314 allows attackers to inject malicious scripts into GitLab instances via “improper rendering of certain file types” leading to attackers hijacking user sessions, stealing sensitive data, or taking control of affected systems.

• Hot Topic

Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom

By infosecbulletin / Tuesday , November 10 2026

A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 10.11. 2026

By infosecbulletin / Tuesday , November 10 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

IBM fixes 208 API Connect vulnerabilities, 47 critical

By infosecbulletin / Tuesday , November 10 2026

IBM patched 208 security flaws in its API Connect platform. The CVE records released out on November 7, 2026. Among...

Read More

• Ransomware

89 New ransomware groups emerge in 2026, claiming over 2,200 victims

By infosecbulletin / Sunday , November 8 2026

New ransomware actions in 2026 show more variety in cybercrime, with some groups claimed over 100 victims. The ransomware attack...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 08.11. 2026

By infosecbulletin / Sunday , November 8 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction

By infosecbulletin / Saturday , November 7 2026

A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 06.11. 2026

By infosecbulletin / Friday , November 6 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Cyber Attack
• Hot Topic

Cyber attack causes French bank Credit Mutuel Arkea €100 million missing

By infosecbulletin / Friday , November 6 2026

French lender Credit Mutuel Arkea said on Thursday hackers had stolen around €100 million ($112.61 million) in a cyber heist...

Read More

• Hot Topic

OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours

By infosecbulletin / Thursday , November 5 2026

OpenAI says that an automated system found and confirmed 948 different Linux kernel security issues in one run. These flaws...

Read More

• National

Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw

By infosecbulletin / Thursday , November 5 2026

Apple credits Md Rasel Bhuyan and fellow researcher Musaab Khan for discovering an out-of-bounds write vulnerability affecting multiple Apple operating...

Read More

GitLab said, “An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting.”

This vulnerability has a CVSS score of 8.7, indicating a high severity threat.

Other vulnerabilities addressed in this release include:

CVE-2024-11931: A medium severity flaw (CVSS score 6.4) that could allow developers to “exfiltrate protected CI/CD variables via CI lint.”

CVE-2024-6324: A medium severity denial-of-service (DoS) vulnerability (CVSS score 4.3) related to “cyclic reference of epics.”

GitLab strongly urges all users to update their installations immediately. “We strongly recommend that all installations running a version affected by the issues described below are upgraded to the latest version as soon as possible.”

Cisco Fixes Meeting Management Allowing Privilege Escalation