CVE 7.5 HIGH

Improper Validation of Specified Quantity in Input in GitLab_CVE-2025-2256

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multiple concurrent large SAML responses.

Basic Information

ID CVE-2025-2256
Source GitLab
Published Sep 12, 2025 at 06:06

Affected Product

Vendor GitLab
Product GitLab
Version 7.12
Affected Versions GitLab GitLab 7.12
GitLab GitLab 18.2
GitLab GitLab 18.3

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.