Skip to content
OpenAdvisories
High WID-SEC-2025-2024 6 CVEs

GitLab: Mehrere Schwachstellen

Published Sep 9, 2025 · Updated Sep 11, 2025 · Revision 2 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 6

  • High 8.5
    CVE-2025-6454

    Server-Side Request Forgery (SSRF) in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests through proxy environments by injecting c…

    GitLab GitLab Web / CMS
  • High 7.5
    CVE-2025-2256

    Improper Validation of Specified Quantity in Input in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multip…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2025-10094

    Improper Validation of Specified Quantity in Input in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by cr…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2025-1250

    Allocation of Resources Without Limits or Throttling in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messag…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2025-7337

    Allocation of Resources Without Limits or Throttling in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user with Developer-level access to cause a persistent denial of service affecting …

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2025-6769

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details throug…

    GitLab GitLab Web / CMS

Revision history

  1. #2

    EUVD Referenzen aufgenommen

  2. #1

    Initiale Fassung

References