An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security     policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before     17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. (CVE-2025-2443)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of GitLab installed on the remote host is affected by a vulnerability, as follows:

  - Gitlab reports: Cross Site Scripting (XSS) in Maven Dependency Proxy through CSP directives Cross Site     Scripting (XSS) in Maven dependency proxy through cache headers Network Error Logging (NEL) Header     Injection in Maven Dependency Proxy Allows Browser Activity Monitoring Denial of service (DOS) via issue     preview Unauthorized access to branch names when Repository assets are disabled in the project     (CVE-2025-2443)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 11b71871-20ba-11f0-9471-2cf05da270f3 advisory.

    Gitlab reports:
    Cross Site Scripting (XSS) in Maven Dependency Proxy through CSP directives     Cross Site Scripting (XSS) in Maven dependency proxy through cache headers     Network Error Logging (NEL) Header Injection in Maven Dependency Proxy Allows Browser Activity Monitoring     Denial of service (DOS) via issue preview     Unauthorized access to branch names when Repository assets are disabled in the project

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
259085	Linux Distros Unpatched Vulnerability : CVE-2025-2443	Nessus	Misc.	medium
240213	GitLab 16.6 < 17.9.7 / 17.10 < 17.10.5 / 17.11 < 17.11.1 (CVE-2025-2443)	Nessus	CGI abuses	high
234820	FreeBSD : Gitlab -- Vulnerabilities (11b71871-20ba-11f0-9471-2cf05da270f3)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2025-2443

medium

Tenable Plugins

medium

high

high