- Description
- GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads.
- Source
- cve@gitlab.com
- NVD status
- Analyzed
- Products
- gitlab
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
- cve@gitlab.com
- CWE-770
- Hype score
- Not currently trending
⚠️Vulnerabilidades en productos GitLab ❗CVE-2025-11702 ❗CVE-2025-10497 ❗CVE-2025-11447 ➡️Más info: https://t.co/1B788fB6zz https://t.co/qa9ndz5ska
@CERTpy
30 Oct 2025
91 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨🚨GitLab Fixes Runner Hijacking and Multiple Denial-of-Service Vulnerabilities — CVE-2025-11702, CVE-2025-10497, CVE-2025-11447, CVE-2025-11974, CVE-2025-11971, CVE-2025-6601, CVE-2025-11989 ZoomEye Dork👉app="Gitlab" 1.1m+ results are found on ZoomEye. ZoomEye Link: h
@zoomeye_team
22 Oct 2025
1110 Impressions
4 Retweets
10 Likes
2 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "4A07627F-FE09-440A-854E-D5456FFA132F",
"versionEndExcluding": "18.3.5",
"versionStartIncluding": "17.10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "6B7E6DED-6510-4DFF-A2AA-000518999F0B",
"versionEndExcluding": "18.3.5",
"versionStartIncluding": "17.10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"matchCriteriaId": "7B4DC1E2-0920-4A1B-8AE8-89B7FDF0897A",
"versionEndExcluding": "18.4.3",
"versionStartIncluding": "18.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "425AEB81-EA04-4702-99F8-B623614F6901",
"versionEndExcluding": "18.4.3",
"versionStartIncluding": "18.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:18.5.0:*:*:*:community:*:*:*",
"matchCriteriaId": "3D74D76F-A787-40A8-A20F-C48C48983B10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:18.5.0:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "CCF08EA3-6D3E-4388-BA9D-A992B771998F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]