CVE-2025-4097

mediumpriority · track · 0EPSS 0.003 · 23 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.30% (23rd) EPSS

CVSS 6.5 · medium

Is it mine?

20 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-28

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to cause a denial of service condition by uploading specially crafted images.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · cve@gitlab.comexploitability 2.8 · impact 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-770USCWE-770USCWE-770US

affected products (20)

Products and version ranges known to be affected.

Open Source GitLab <18.4.6all versionscert_bundDE
Open Source GitLab <18.5.4all versionscert_bundDE
Open Source GitLab <18.6.2all versionscert_bundDE
Open Source GitLab< 18.4.6cert_bundDE
Open Source GitLab< 18.5.4cert_bundDE
Open Source GitLab< 18.6.2cert_bundDE
GitLab GitLab11.10 → 18.4.6enisa_euvdEU
GitLab GitLab18.5 → 18.5.4enisa_euvdEU
GitLab GitLab18.6 → 18.6.2enisa_euvdEU
GitLab Inc. Gitlab11.10 → 18.4.6fstec_bduRU
GitLab Inc. Gitlab18.5 → 18.5.4fstec_bduRU
GitLab Inc. Gitlab18.6 → 18.6.2fstec_bduRU
GitLab Community Edition, Enterprise Edition≤ vers:unknown/*ncsc_nlNL
GitLab GitLab≤ vers:unknown/*ncsc_nlNL
gitlab gitlab11.10.0 → 18.4.6nvdUScpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
gitlab gitlab18.5.0 → 18.5.4nvdUScpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
gitlab gitlab18.6.0 → 18.6.2nvdUScpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Bitnami gitlab11.10.0 → 18.4.6osvUSpkg:bitnami/gitlab
Bitnami gitlab18.5.0 → 18.5.4osvUSpkg:bitnami/gitlab
Bitnami gitlab18.6.0 → 18.6.2osvUSpkg:bitnami/gitlab

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2025-0390Kwetsbaarheden verholpen in GitLab CE/EENL2025-12-11csaf · ncsc_nlNL
GitLab heeft kwetsbaarheden verholpen in GitLab CE/EE.
WID-SEC-W-2025-2822GitLab: Mehrere SchwachstellenDeutsch2025-12-10csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.
BIT-gitlab-2025-4097Allocation of Resources Without Limits or Throttling in GitLab2025-12-18vendor · osvUS
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to cause a denial of service condition by uploading specially crafted images.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl nvd osv NVD CVE.org MITRE

published 2025-12-11modified 2026-10-14

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan