CVE-2025-13928
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrect authorization validation in API endpoints.
Summary dbcve.org
An improper authorization validation vulnerability in GitLab CE/EE API endpoints allows unauthenticated users to trigger a denial of service condition. The flaw exists in specific versions from 17.7 through 18.8 where API endpoint authorization checks are incorrectly implemented, permitting unauthenticated attackers to cause service disruption.
Mitigation
Upgrade GitLab to version 18.6.4 or later, 18.7.2 or later, or 18.8.2 or later to remediate the authorization validation issue in the API endpoints.