CVE-2025-10903

Katalog CVE

CVSS 6.5 · Medium EPSS 0,41%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada gitlab. Skor CVSS 3.1 6.5 (Medium) menurut gitlab.com.

Deskripsi (NVD)

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature.

Rincian

Terbit di NVD

26 Agustus 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber gitlab.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/ release notes · advisory vendor
• https://gitlab.com/gitlab-org/gitlab/-/work_items/571842 issue tracking · advisory vendor
• https://hackerone.com/reports/3292470 permissions required · advisory pihak ketiga