CVE-2025-2614: Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed.
Other sources
GitLab has remediated an issue that could have allowed an authenticated user to cause a denial of service condition by creating specially crafted content that consumes excessive server resources when processed.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-2614?
CVE-2025-2614 is classified as a medium severity vulnerability that allows denial of service under specific conditions.
How do I fix CVE-2025-2614?
The recommended fix for CVE-2025-2614 is to upgrade GitLab CE/EE to version 18.0.6 or later, or 18.1.4 or later, or 18.2.2 or later.
Who is affected by CVE-2025-2614?
CVE-2025-2614 affects all versions of GitLab CE/EE from version 11.6 up to but not including versions 18.0.6, 18.1.4, and 18.2.2.
What impact does CVE-2025-2614 have on systems?
CVE-2025-2614 may allow an authenticated user to create a condition that leads to a denial of service, affecting system availability.
Is CVE-2025-2614 being actively exploited?
As of now, there are no known active exploits for CVE-2025-2614, but it is advisable to patch the vulnerability to mitigate risks.