CVE-2025-5996

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5996
An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. A lack of input validation in HTTP responses could allow an authenticated user to cause denial of service.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/476671 Exploit Issue Tracking
https://gitlab.com/gitlab-org/gitlab/-/issues/479167 Exploit Issue Tracking
https://gitlab.com/gitlab-org/gitlab/-/issues/483111 Exploit Issue Tracking
https://gitlab.com/gitlab-org/gitlab/-/issues/483150 Broken Link
https://gitlab.com/gitlab-org/gitlab/-/issues/498649 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
History

08 Aug 2025, 18:20

Type Values Removed Values Added
First Time Gitlab gitlab
Gitlab
CPE cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
References () https://gitlab.com/gitlab-org/gitlab/-/issues/476671 - () https://gitlab.com/gitlab-org/gitlab/-/issues/476671 - Exploit, Issue Tracking
References () https://gitlab.com/gitlab-org/gitlab/-/issues/479167 - () https://gitlab.com/gitlab-org/gitlab/-/issues/479167 - Exploit, Issue Tracking
References () https://gitlab.com/gitlab-org/gitlab/-/issues/483111 - () https://gitlab.com/gitlab-org/gitlab/-/issues/483111 - Exploit, Issue Tracking
References () https://gitlab.com/gitlab-org/gitlab/-/issues/483150 - () https://gitlab.com/gitlab-org/gitlab/-/issues/483150 - Broken Link
References () https://gitlab.com/gitlab-org/gitlab/-/issues/498649 - () https://gitlab.com/gitlab-org/gitlab/-/issues/498649 - Broken Link
Summary
  • (es) Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones (desde la 2.1.0 hasta la 17.10.8), la 17.11 hasta la 17.11.4 y la 18.0 hasta la 18.0.2. La falta de validación de entrada en las respuestas HTTP podría permitir que un usuario autenticado provoque una denegación de servicio.

12 Jun 2025, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-12 10:16

Updated : 2025-08-08 18:20

NVD link : CVE-2025-5996

Mitre link : CVE-2025-5996

CVE.ORG link : CVE-2025-5996

JSON object : View

Products Affected

gitlab

  • gitlab
CWE
CWE-770

Allocation of Resources Without Limits or Throttling