Description
An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 18.1 – < 18.2.7, 18.3 – < 18.3.3, 18.4 – < 18.4.1 | 18.2.7 |
Advisories 2
- WID-SEC-2025-2140 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2025
- NCSC-2025-0300 Kwetsbaarheden verholpen in GitLab EE & CE NCSC-NL (Netherlands) · Sep 29, 2025
References
- GitLab Issue #517757 issue-tracking permissions-required