Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4225

Опубликовано: 27 авг. 2025
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to cause a denial-of-service condition affecting all users by sending specially crafted GraphQL requests.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 14.1.0 (включая) до 18.1.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 14.1.0 (включая) до 18.1.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 18.2.0 (включая) до 18.2.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 18.2.0 (включая) до 18.2.5 (исключая)
cpe:2.3:a:gitlab:gitlab:18.3.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:18.3.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 10%
0.00038
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 5.3
debian
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 5.3
github
21 день назад

An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to cause a denial-of-service condition affecting all users by sending specially crafted GraphQL requests.

EPSS

Процентиль: 10%
0.00038
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770