CVEvulnerability

CVE-2025-1072

6.5 MEDIUM Published 2025-02-07 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770

Description

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service could occur upon importing maliciously crafted content using the Fogbugz importer.

Affected configurations

• gitlab gitlab (>= 7.14.1 < 17.3.7) • gitlab gitlab (>= 17.4.0 < 17.4.4) • gitlab gitlab (>= 17.5.0 < 17.5.2) • gitlab gitlab (>= 17.7.0 < 17.7.3)

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References