CVE-2025-5996
Allocation of Resources Without Limits or Throttling in GitLab
Résumé
Allocation of Resources Without Limits or Throttling in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. A lack of input validation in HTTP responses could allow an authenticated user to cause denial of service.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"2.10.0"},{"fixed":"17.11.3"},{"introduced":"18.0.0"},{"fixed":"18.0.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report gitlab.com
- report gitlab.com
- report gitlab.com
- report gitlab.com