VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 13, 2025· Updated Jun 17, 2026

CVE-2025-1257

CVE-2025-1257

Description

An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. A vulnerability in certain GitLab instances could allow an attacker to cause a denial of service condition by manipulating specific API inputs.

Affected products

5
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.3.0,<17.7.7
    • (no CPE)range: 12.3 <= v < 17.7.7, 17.8 < v < 17.8.5, 17.9 < v < 17.9.2
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 12.3
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: 12.3 <= v < 17.7.7, 17.8 < v < 17.8.5, 17.9 < v < 17.9.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 12.3.0, < 17.9.2

Patches

Vulnerability mechanics

References

2

News mentions

1