An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multiple concurrent large SAML responses.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Gitlab |
|
No data.
No data.
No data.
Fixes
Solution
Upgrade to versions 18.1.6, 18.2.6, 18.3.2 or above.
Workaround
No workaround given by the vendor.
References
History
Fri, 12 Sep 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multiple concurrent large SAML responses. | |
| Title | Improper Validation of Specified Quantity in Input in GitLab | |
| First Time appeared |
Gitlab
Gitlab gitlab |
|
| Weaknesses | CWE-1284 | |
| CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Gitlab
Gitlab gitlab |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: GitLab
Published:
Updated: 2025-09-12T06:06:04.796Z
Reserved: 2025-03-12T15:05:04.877Z
Link: CVE-2025-2256
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-09-12T06:15:42.340
Modified: 2025-09-12T06:15:42.340
Link: CVE-2025-2256
Redhat
No data.
OpenCVE Enrichment
No data.