CVE-2025-10094

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/	Release Notes Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/528469	Broken Link
https://hackerone.com/reports/3049089	Permissions Required

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

History

19 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 10.7 hasta versiones anteriores a la 18.1.6, desde la 18.2 hasta versiones anteriores a la 18.2.6, y desde la 18.3 hasta versiones anteriores a la 18.3.2 que podría haber permitido a usuarios autenticados interrumpir el acceso a los listados de tokens y operaciones administrativas relacionadas mediante la creación de tokens con nombres excesivamente largos.

Information

Published : 2025-09-12 05:15

Updated : 2026-10-19 17:10

NVD link : CVE-2025-10094

Mitre link : CVE-2025-10094

CVE.ORG link : CVE-2025-10094

JSON object : View

Products Affected

gitlab

gitlab

CWE

CWE-1284

Improper Validation of Specified Quantity in Input

{"id": "CVE-2025-10094", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10094", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-12T13:05:04.221834Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cve@gitlab.com", "affectedData": [{"cpes": ["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"], "repo": "git://git@gitlab.com:gitlab-org/gitlab.git", "vendor": "GitLab", "product": "GitLab", "versions": [{"status": "affected", "version": "10.7", "lessThan": "18.1.6", "versionType": "semver"}, {"status": "affected", "version": "18.2", "lessThan": "18.2.6", "versionType": "semver"}, {"status": "affected", "version": "18.3", "lessThan": "18.3.2", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-12T05:15:31.127", "references": [{"url": "https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@gitlab.com"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/528469", "tags": ["Broken Link"], "source": "cve@gitlab.com"}, {"url": "https://hackerone.com/reports/3049089", "tags": ["Permissions Required"], "source": "cve@gitlab.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cve@gitlab.com", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names."}, {"lang": "es", "value": "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 10.7 hasta versiones anteriores a la 18.1.6, desde la 18.2 hasta versiones anteriores a la 18.2.6, y desde la 18.3 hasta versiones anteriores a la 18.3.2 que podr\u00eda haber permitido a usuarios autenticados interrumpir el acceso a los listados de tokens y operaciones administrativas relacionadas mediante la creaci\u00f3n de tokens con nombres excesivamente largos."}], "lastModified": "2026-10-19T17:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "94BD5D04-0974-4191-88D9-C012FB6E7FE3", "versionEndExcluding": "18.1.6", "versionStartIncluding": "10.7.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "C952B2BB-FB17-4E6F-B9DE-17201BFAF34D", "versionEndExcluding": "18.1.6", "versionStartIncluding": "10.7.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "0AE72006-E61F-4311-85EC-6A66CEB965BF", "versionEndExcluding": "18.2.6", "versionStartIncluding": "18.2.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "08696B68-9433-4D5C-9B89-8C27B560EAAC", "versionEndExcluding": "18.2.6", "versionStartIncluding": "18.2.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "CBCE9083-14B2-4CB3-958F-A5A434802971", "versionEndExcluding": "18.3.2", "versionStartIncluding": "18.3.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "D53E3D75-7E79-43CE-8A5B-91A8FA2B293E", "versionEndExcluding": "18.3.2", "versionStartIncluding": "18.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@gitlab.com"}