An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated attackers to create a DoS condition by sending crafted GraphQL requests.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/534424 | Broken Link |
| https://hackerone.com/reports/3067111 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
12 Aug 2025, 14:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/534424 - Broken Link | |
| References | () https://hackerone.com/reports/3067111 - Permissions Required | |
| CPE | cpe:2.3:a:gitlab:gitlab:18.1.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:18.1.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
|
| First Time |
Gitlab gitlab
Gitlab |
26 Jun 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-26 06:15
Updated : 2025-08-12 14:42
NVD link : CVE-2025-3279
Mitre link : CVE-2025-3279
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-770
Allocation of Resources Without Limits or Throttling