CVE-2025-0290CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

Medium · published January 28, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2025-01-28T08:45Z
EPSS history
Timeline
  • 28 JAN 08:45Z
    Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
    cvelistv5