CNNVD-202506-1654 Information

CNNVD ID

CNNVD-202506-1654

CVE-2025-1478

  • CNNVD Published: 2025-06-12

Description (Chinese)

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE)都是美国GitLab公司的产品。GitLab Enterprise Edition是一套内容管理系统。GitLab Community Edition是一种社区版 GitLab 。 GitLab CE/EE 17.10.7之前版本、17.11.3之前版本和18.0.1之前版本存在安全漏洞,该漏洞源于Board Names输入验证不足,可能导致拒绝服务。

Description (English)

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) are products of the United States company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There is a security loophole before Gitlab CE/EE 17.10.7, before 17.11.3 and before 18.0.1, which stems from the inadequate validation of the Board Names input, which may lead to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GitLab

Published

2025-06-12

Last Modified

2026-02-24

References

https://gitlab.com/gitlab-org/gitlab/-/issues/520354 https://hackerone.com/reports/2987444 https://nvd.nist.gov/vuln/detail/CVE-2025-1478

Patch

https://about.gitlab.com/releases/

Share on: