PT-2026-24708 · Gitlab · Gitlab Ce/Ee

CVE-2025-13690 · Publicado 2026-03-11 · Atualizado 2026-03-15

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.11 through 18.7.5 GitLab CE/EE versions 18.8 through 18.8.5 GitLab CE/EE versions 18.9 through 18.9.1

Description An authenticated user could potentially cause a denial of service condition. This is due to improper input validation on custom header names within webhooks under specific circumstances.

Recommendations GitLab versions 16.11 through 18.7.5 should be updated to version 18.7.6 or later. GitLab versions 18.8 through 18.8.5 should be updated to version 18.8.6 or later. GitLab versions 18.9 through 18.9.1 should be updated to version 18.9.2 or later.

Exploit

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

BDU:2026-03483

BIT-GITLAB-2025-13690

CVE-2025-13690

Produtos afetados

Gitlab Ce/Ee

Referências · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13690.json · Exploit
• 🔥 https://hackerone.com/reports/3415683 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13690 · Nota
• https://twitter.com/CVEnew/status/2032998314128318741 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13690 · Nota de Segurança
• https://gitlab.com/gitlab-org/gitlab/-/work_items/582096 · Nota
• https://about.gitlab.com/releases/2026/03/11/patch-release-gitlab-18-9-2-released · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-13690 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-13690 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-13690 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-13690 · Aviso do Fabricante
• https://t.me/cveNotify/155387 · Publicação no Telegram
• https://twitter.com/OrizonCyber/status/2031769179502612872 · Publicação no Twitter
• https://osv.dev/vulnerability/BIT-gitlab-2025-13690 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-03483 · Nota de Segurança