GitLab CE/EE Discord Webhook Integration Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been identified in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 11.6 prior to 17.10.7, 17.11 prior to 17.11.3, and 18.0 prior to 18.0.1. The issue arises from a Discord webhook integration that may lead to service disruption.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal service operations.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
5.2
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.