Published
2025-08-27
·
Updated
2025-08-30
·
CVE-2025-3601
6.5
Medium
| Base vector | Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 8.15 through 18.1.4
GitLab CE/EE versions 18.2 through 18.2.4
GitLab CE/EE versions 18.3 through 18.3.0
Description:
An authenticated user could cause a Denial of Service (DoS) condition by submitting URLs that generate excessively large responses.
Recommendations:
Update to GitLab CE/EE version 18.1.5 or later.
Update to GitLab CE/EE version 18.2.5 or later.
Update to GitLab CE/EE version 18.3.1 or later.
Exploit
Fix
DoS
Allocation of Resources Without Limits