CVE-2025-4097
- Source
- https://cve.org/CVERecord?id=CVE-2025-4097
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4097.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-4097
- Aliases
- Downstream
CGA (33)
- CGA-27g4-cw74-f2fw
- CGA-2mq5-754x-p2p7
- CGA-326p-x4q2-8p4v
- CGA-4hmh-7m8r-qv47
- CGA-4qvf-q9w7-78qq
- CGA-53gp-2h6g-qp3w
- CGA-549h-44hm-jrj2
- CGA-57cj-ccxg-48pp
- CGA-58j6-3852-xqf7
- CGA-6mpr-355g-7f9q
- CGA-6qc8-83pf-483q
- CGA-754x-74pq-f357
- CGA-7w97-mj2g-vqhh
- CGA-887x-95gh-w4f4
- CGA-99qm-mvrw-7gx3
- CGA-fwjg-xmw4-9mrw
- CGA-g4hg-2xgf-625g
- CGA-gcp7-m58x-p4wp
- CGA-gmp4-gq3c-jm9p
- CGA-hjg5-722f-45pm
- CGA-hq75-28pj-hjfc
- CGA-jxv5-w89h-5pmv
- CGA-mwh9-fmwm-9rr8
- CGA-p226-cm43-mmrf
- CGA-p7wf-g4jj-w8x5
- CGA-r26p-3hmc-ww33
- CGA-r68p-qwmh-g26j
- CGA-rfjm-85gc-5mvw
- CGA-vpw5-mp8x-x2pv
- CGA-vqx2-g46r-h538
- CGA-w2pp-h6cw-r8v6
- CGA-wqj9-9q96-6jxm
- CGA-xrx2-v2c2-r728
UBUNTU (1)
- Published
- 2025-12-11T04:05:22Z
- Modified
- 2026-10-22T02:48:45Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Allocation of Resources Without Limits or Throttling in GitLab
- Details
-
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to cause a denial of service condition by uploading specially crafted images.
- Database specific
{ "cna_assigner": "GitLab", "cwe_ids": [ "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4097.json" }- References
-
- https://about.gitlab.com/releases/2025/12/10/patch-release-gitlab-18-6-2-released/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4097.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-4097
- https://gitlab.com/gitlab-org/gitlab/-/issues/538192
- git://git@gitlab.com:gitlab-org/gitlab.git
Affected packages
Git / gitlab.com/gitlab-org/gitlab
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/gitlab-org/gitlab
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "11.10" }, { "fixed": "18.4.6" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "18.5" }, { "fixed": "18.5.4" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "18.6" }, { "fixed": "18.6.2" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }