CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects GitLab. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2025-11974
Severity
MEDIUM
CVSS
6.5
EPSS
0.36%
GitLab
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints.
Related CVEs
Other vulnerabilities affecting the same vendor(s)