MEDIUM
CVE-2025-7449
CVSS
6.5
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user with specific permissions to cause a denial of service condition through HTTP response processing.
Summary dbcve.org
A denial of service vulnerability exists in GitLab CE/EE affecting versions 8.3 through 18.4.4, 18.5.0-18.5.2, and 18.6.0. An authenticated user with specific permissions can trigger the vulnerability through malicious HTTP response processing, causing the service to become unavailable.
Mitigation
Upgrade GitLab to version 18.4.5, 18.5.3, 18.6.1 or later to remediate this vulnerability.
Weakness (CWE)
CWE-770
Resource Allocation Without Limits
EPSS Score
0.41%
Probability of exploitation in next 30 days
35.4th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.