Non évaluée
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-1257
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. A vulnerability in certain GitLab instances could allow an attacker to cause a denial of service condition by manipulating specific API inputs.
Références
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com