Volerion logoVolerion
Volerion logoVolerion

GitLab CE/EE Denial-of-Service Vulnerability Due to Improper Input Validation in HTTP Responses

Vulnerability

A denial-of-service vulnerability has been identified in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 2.1.0 prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. The issue arises from a lack of input validation in HTTP responses, which could allow an authenticated user to disrupt service.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing interruptions in service availability.

Added: Jun 12, 2025, 10:18 AM
Updated: Jun 12, 2025, 10:18 AM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
5.2
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.