An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Gitlab |
|
No data.
No data.
No data.
Fixes
Solution
Upgrade to versions 18.1.6, 18.2.6, 18.3.2 or above.
Workaround
No workaround given by the vendor.
References
History
Fri, 12 Sep 2025 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names. | |
| Title | Improper Validation of Specified Quantity in Input in GitLab | |
| First Time appeared |
Gitlab
Gitlab gitlab |
|
| Weaknesses | CWE-1284 | |
| CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Gitlab
Gitlab gitlab |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GitLab
Published:
Updated: 2025-09-12T04:57:11.650Z
Reserved: 2025-09-08T07:05:02.957Z
Link: CVE-2025-10094
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-09-12T05:15:31.127
Modified: 2025-09-12T05:15:31.127
Link: CVE-2025-10094
Redhat
No data.
OpenCVE Enrichment
No data.