CVE-2025-0290

Published: Jan 28, 2025Modified: Aug 5, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: cve@gitlab.com (Secondary)

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.0.0 to 17.5.5
Gitlab Gitlab	From 17.6.0 to 17.6.3
Gitlab Gitlab	From 15.0.0 to 17.5.5
Gitlab Gitlab	From 17.6.0 to 17.6.3
Gitlab Gitlab	Version 17.7.0
Gitlab Gitlab	Version 17.7.0

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (1)

https://gitlab.com/gitlab-org/gitlab/-/issues/372134

Source: cve@gitlab.com

Broken Link

Timeline

No history available yet.