An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature.
2025-08-13T18:15:31.010
2025-08-15T16:31:10.727
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gitlab | gitlab | < 18.0.6 | Yes |
| Application | gitlab | gitlab | < 18.0.6 | Yes |
| Application | gitlab | gitlab | < 18.1.4 | Yes |
| Application | gitlab | gitlab | < 18.1.4 | Yes |
| Application | gitlab | gitlab | < 18.2.2 | Yes |
| Application | gitlab | gitlab | < 18.2.2 | Yes |