CVE-2025-1477
Description
An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoints.
Summary dbcve.org
An unauthenticated remote denial of service vulnerability in GitLab CE/EE allows attackers to send specially crafted payloads to specific integration API endpoints, causing service disruption. The vulnerability affects versions from 8.14 through 18.0.5, 18.1.0-18.1.3, and 18.2.0-18.2.1.
Mitigation
Upgrade GitLab to version 18.0.6, 18.1.4, or 18.2.2 or later to patch the vulnerability. As a defensive measure, consider restricting external access to integration API endpoints via firewall or authentication proxies until the upgrade is completed.