An issue has been discovered in GitLab CE/EE affecting all versions from 8.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Improper input validation in Tokens Names could be used to trigger a denial of service.
2025-06-12T10:16:38.260
2025-08-08T18:30:39.063
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gitlab | gitlab | < 17.10.8 | Yes |
| Application | gitlab | gitlab | < 17.10.8 | Yes |
| Application | gitlab | gitlab | < 17.11.4 | Yes |
| Application | gitlab | gitlab | < 17.11.4 | Yes |
| Application | gitlab | gitlab | < 18.0.2 | Yes |
| Application | gitlab | gitlab | < 18.0.2 | Yes |