CVE-2025-1257
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 13, 2025
CWE ID 770
Summary
CVE-2025-1257 is a denial-of-service vulnerability affecting GitLab Enterprise Edition (EE). Affected versions include those starting from 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. An attacker can exploit this flaw by manipulating specific API inputs, causing a denial-of-service condition in certain GitLab instances. This issue poses a risk to the availability and functionality of GitLab installations and should be addressed promptly by upgrading to a patched version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GitLab
Affected Vendors
- GitLab Inc.