← Database

CVE-2025-13335

MEDIUM CVSS: 6.5 Published: 2026-01-22 Modified: 2026-06-17

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-835

References