Denial of Service Vulnerability in GitLab by GitLab Inc.
CVE-2025-2937
6.5MEDIUM
What is CVE-2025-2937?
A security issue has been identified in GitLab CE/EE, affecting multiple versions, that enables authenticated users to exploit the Wiki feature by sending maliciously crafted markdown payloads. This can lead to a denial of service condition, impacting system availability. Users are advised to update to the latest versions to mitigate this risk.
Affected Version(s)
GitLab 13.2 < 18.0.6
GitLab 18.1 < 18.1.4
GitLab 18.2 < 18.2.2
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Thanks [yuki_osaki](https://hackerone.com/yuki_osaki) for reporting this vulnerability through our HackerOne bug bounty program