PT-2026-3854 · Gitlab · Gitlab Ce/Ee+1
CVE-2025-13335
·
Published
2026-01-21
·
Updated
2026-01-27
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 17.1 through 18.6.4
GitLab CE/EE versions 18.7 through 18.7.2
GitLab CE/EE versions 18.8 through 18.8.2
Description
GitLab CE/EE is affected by an issue that could allow an authenticated user to create a denial of service condition. This can occur by configuring malformed Wiki documents that bypass cycle detection.
Recommendations
Update GitLab CE/EE to version 18.6.4 or later.
Update GitLab CE/EE to version 18.7.2 or later.
Update GitLab CE/EE to version 18.8.2 or later.
Exploit
Fix
DoS
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab
Gitlab Ce/Ee