CVE-2025-12562 — Allocation of Resources Without Limits or Throttling in Gitlab
Severity
7.5HIGHNVD
EPSS
0.2%
top 61.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 11
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted GraphQL queries that bypass query complexity limits.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages8 packages
🔴Vulnerability Details
2📋Vendor Advisories
3GitLab▶
CVE-2025-12562: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could↗2025-12-11
Debian▶
CVE-2025-12562: gitlab - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10...↗2025
Microsoft▶
Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspe↗2017-08-08