A high-severity cross-site scripting vulnerability in GitLab CE/EE could allow an authenticated attacker to compromise user accounts through malicious content injection.

This is a stored cross-site scripting (XSS) vulnerability (CWE-79) that occurs due to improper neutralization of user-supplied input. It requires an authenticated user with low privileges to trigger the injection, which can lead to complete account takeover by executing malicious scripts in the context of other users.

The ability for an attacker to achieve account takeover poses a severe risk to organizational security, as it grants unauthorized access to internal repositories, sensitive source code, and CI/CD pipelines. With a CVSS score of 8.7, this flaw represents a significant threat to confidentiality and integrity, potentially allowing for lateral movement within the development environment and the exfiltration of intellectual property.

Immediate Action: Upgrade all GitLab CE/EE installations to version 18.2.7, 18.3.3, 18.4.1, or later versions to apply the necessary security patches.

Proactive Monitoring: Monitor user activity logs for suspicious script execution patterns or anomalous session behavior that may indicate successful exploitation of an account.

Compensating Controls: Implement a strict Content Security Policy (CSP) and ensure that Web Application Firewalls are configured to inspect and sanitize incoming web traffic for common XSS payloads.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the linked HackerOne report (3297413).

Given the high CVSS score and the potential for full account takeover, organizations should prioritize patching their GitLab environments immediately. The availability of a public proof-of-concept lowers the barrier to entry for potential attackers, making rapid remediation essential to preventing unauthorized access to critical development infrastructure.