6.5

CVE-2023-5825

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to exhaust all available memory through an infinite loop and cause Denial of Service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ GitLab SwEdition community Version >= 16.2.0 < 16.3.6
Gitlab ≫ GitLab SwEdition enterprise Version >= 16.2.0 < 16.3.6
Gitlab ≫ GitLab SwEdition community Version >= 16.4.0 < 16.4.2
Gitlab ≫ GitLab SwEdition enterprise Version >= 16.4.0 < 16.4.2
Gitlab ≫ GitLab Version 16.5.0 SwEdition community
Gitlab ≫ GitLab Version 16.5.0 SwEdition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.46
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve@gitlab.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://gitlab.com/gitlab-org/gitlab/-/issues/428984
Vendor Advisory
Issue Tracking
https://hackerone.com/reports/2218566
Permissions Required