An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or notes.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Gitlab |
|
No data.
No data.
No data.
Fixes
Solution
Upgrade to versions 18.1.6, 18.2.6, 18.3.2 or above.
Workaround
No workaround given by the vendor.
References
History
Fri, 12 Sep 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or notes. | |
| Title | Allocation of Resources Without Limits or Throttling in GitLab | |
| First Time appeared |
Gitlab
Gitlab gitlab |
|
| Weaknesses | CWE-770 | |
| CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Gitlab
Gitlab gitlab |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GitLab
Published:
Updated: 2025-09-12T06:06:14.804Z
Reserved: 2025-02-12T15:01:57.255Z
Link: CVE-2025-1250
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-09-12T06:15:42.080
Modified: 2025-09-12T06:15:42.080
Link: CVE-2025-1250
Redhat
No data.
OpenCVE Enrichment
No data.