GitLab CE/EE is affected by a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary scripts in the context of other users' sessions.

This is a stored cross-site scripting (CWE-79) flaw where an authenticated user can inject malicious HTML content into scoped label descriptions, leading to unauthorized script execution when the label is viewed by other users.

Successful exploitation allows an attacker to execute arbitrary JavaScript within the browser session of a victim, which could lead to session hijacking, unauthorized actions performed on behalf of the user, or the theft of sensitive data. With a CVSS score of 8.7, the risk is classified as High due to the potential for significant impact on user security and integrity within the GitLab environment.

Immediate Action: Upgrade all GitLab CE/EE instances to version 18.2.2 or higher immediately.

Proactive Monitoring: Review application logs for anomalous activity involving scoped label modifications and monitor for unexpected client-side script execution patterns.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict the sources of executable scripts and use a Web Application Firewall (WAF) to filter malicious HTML input patterns.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the HackerOne report linked in the CVE references.

Given the High severity score and the existence of a public proof-of-concept, organizations should prioritize the update to version 18.2.2. Patching the software is the only definitive way to neutralize the input sanitization flaw and prevent the potential compromise of user sessions.