GitLab CE/EE Multiple Vulnerabilities CVSS 8.5 Allow Information Disclosure and Data Manipulation

CERT-Bund published a security advisory detailing multiple high-severity vulnerabilities in GitLab CE/EE. These flaws affect all GitLab versions below 18.9.5, 18.10.3, and 18.8.9. The vulnerabilities enable remote attackers to disclose sensitive information, manipulate data, bypass security controls, cause denial-of-service conditions, and conduct cross-site scripting attacks.

Organizations running affected GitLab instances should prioritize patching to the latest secure versions immediately. Given the high CVSS score of 8.5 and confirmed remote attack vector, these vulnerabilities present significant risk to systems handling sensitive code repositories or user data. Security teams should assess exposure, apply mitigations where patching is delayed, and monitor for related CVE publications.