CVE-2025-8279 in Language Server

Riassunto

di MITRE • 28/07/2025

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: GitLab
• Prenotare: 28/07/2025
• Divulgazione: 28/07/2025
• Moderazione: accettato
• Voce: VDB-317923
• CPE: pronto
• CWE: CWE-306 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.00415
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-8279
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-8279
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-8279/