PT-2025-43134 · Gitlab · Gitlab Ce/Ee

Published 2025-10-22 · Updated 2025-11-01 · CVE-2025-10497

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0

Description An issue in GitLab CE/EE could allow an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads. The issue relates to the unlimited allocation of resources. The vulnerability impacts event collection.

Recommendations GitLab versions prior to 18.3.5 should be updated. GitLab versions prior to 18.4.3 should be updated. GitLab versions prior to 18.5.1 should be updated.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-13373

BIT-GITLAB-2025-10497

CVE-2025-10497

Affected Products

Gitlab Ce/Ee

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10497.json · Exploit
• 🔥 https://hackerone.com/reports/3338151 · Exploit
• https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10497 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-10497 · Security Note
• https://bdu.fstec.ru/vul/2025-13373 · Security Note
• https://ubuntu.com/security/CVE-2025-10497 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-2025-10497 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-10497 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10497 · Security Note
• https://twitter.com/cracbot/status/1984576187017150845 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1983186725393276967 · Twitter Post
• https://gitlab.com/gitlab-org/gitlab/-/issues/570336 · Note
• https://twitter.com/zoomeye_team/status/1980941411387424898 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1odet34/gitlab_urgently_patches_critical_dos · Reddit Post