Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-10867

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.5%
CVSS Severity
CVSS v3 Score 3.5
Products affected by CVE-2025-10867
  • Gitlab » Gitlab » Version: 18.1.0
    cpe:2.3:a:gitlab:gitlab:18.1.0
  • Gitlab » Gitlab » Version: 18.1.1
    cpe:2.3:a:gitlab:gitlab:18.1.1
  • Gitlab » Gitlab » Version: 18.1.2
    cpe:2.3:a:gitlab:gitlab:18.1.2
  • Gitlab » Gitlab » Version: 18.1.3
    cpe:2.3:a:gitlab:gitlab:18.1.3
  • Gitlab » Gitlab » Version: 18.1.4
    cpe:2.3:a:gitlab:gitlab:18.1.4
  • Gitlab » Gitlab » Version: 18.1.5
    cpe:2.3:a:gitlab:gitlab:18.1.5
  • Gitlab » Gitlab » Version: 18.1.6
    cpe:2.3:a:gitlab:gitlab:18.1.6
  • Gitlab » Gitlab » Version: 18.2
    cpe:2.3:a:gitlab:gitlab:18.2
  • Gitlab » Gitlab » Version: 18.2.0
    cpe:2.3:a:gitlab:gitlab:18.2.0
  • Gitlab » Gitlab » Version: 18.2.2
    cpe:2.3:a:gitlab:gitlab:18.2.2
  • Gitlab » Gitlab » Version: 18.2.5
    cpe:2.3:a:gitlab:gitlab:18.2.5
  • Gitlab » Gitlab » Version: 18.2.6
    cpe:2.3:a:gitlab:gitlab:18.2.6
  • Gitlab » Gitlab » Version: 18.3.0
    cpe:2.3:a:gitlab:gitlab:18.3.0
  • Gitlab » Gitlab » Version: 18.3.2
    cpe:2.3:a:gitlab:gitlab:18.3.2
  • Gitlab » Gitlab » Version: 18.4.0
    cpe:2.3:a:gitlab:gitlab:18.4.0


Contact Us

Shodan ® - All rights reserved