CNNVD-202511-2840 Information

Nov 26, 2025 cve

CNNVD ID

CNNVD-202511-2840

CVE-2025-7449

CNNVD Published: 2025-11-26

Description (Chinese)

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE）都是美国GitLab公司的产品。GitLab Enterprise Edition是一套内容管理系统。GitLab Community Edition是一种社区版 GitLab 。 GitLab CE/EE 8.3版本至18.4.5之前版本、18.5版本至18.5.3之前版本和18.6版本至18.6.1之前版本存在安全漏洞，该漏洞源于具有特定权限的已验证用户可通过HTTP响应处理导致拒绝服务。

Description (English)

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) are products of the United States company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There is a security loophole between GitLab CE/EE 8.3 and 18.4.5, 18.5 to 18.5.3 and 18.6 to 18.6.1, which stems from the fact that certified users with specific privileges can respond through HTTP to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GitLab

Published

2025-11-26

Last Modified

2026-02-24

References

https://hackerone.com/reports/3215054 https://gitlab.com/gitlab-org/gitlab/-/issues/554938 https://access.redhat.com/security/cve/cve-2025-7449 https://vigilance.fr/vulnerability/GitLab-CE-EE-multiple-vulnerabilities-dated-26-11-2025-48877

Patch

https://packages.gitlab.com/gitlab/gitlab-ee

Share on: