Denial of Service Vulnerability in GitLab by GitLab Inc.
CVE-2025-2937

6.5MEDIUM

Key Information:

Vendor

Gitlab

Status
Vendor
CVE Published:
13 August 2025

What is CVE-2025-2937?

A security issue has been identified in GitLab CE/EE, affecting multiple versions, that enables authenticated users to exploit the Wiki feature by sending maliciously crafted markdown payloads. This can lead to a denial of service condition, impacting system availability. Users are advised to update to the latest versions to mitigate this risk.

Affected Version(s)

GitLab 13.2 < 18.0.6

GitLab 18.1 < 18.1.4

GitLab 18.2 < 18.2.2

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks [yuki_osaki](https://hackerone.com/yuki_osaki) for reporting this vulnerability through our HackerOne bug bounty program
.
CVE-2025-2937 : Denial of Service Vulnerability in GitLab by GitLab Inc.