GitLab CE/EE Denial-of-Service Vulnerability via Integration API Payloads

Vulnerability

A denial-of-service vulnerability has been identified in GitLab CE/EE versions 8.14 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2. The issue could have allowed an unauthenticated user to disrupt service by sending specially crafted payloads to certain integration API endpoints.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing disruptions in service availability.

Added: Aug 13, 2025, 10:09 PM
Updated: Aug 13, 2025, 10:09 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
7.4
remediation
0.0
relevance
0.3
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.