← Back

CVE-2025-0673

nvd nist
Published: Jun 12, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: cve@gitlab.com (Secondary)

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2, allow an attacker to trigger an infinite redirect loop, potentially leading to a denial of service condition.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
17.11.0 ≤ version < 17.11.4
Gitlab
17.7.0 ≤ version < 17.10.8
Gitlab
18.0.0 ≤ version < 18.0.2
Gitlab
17.11.0 ≤ version < 17.11.4
Gitlab
17.7.0 ≤ version < 17.10.8
Gitlab
18.0.0 ≤ version < 18.0.2

Related CWEs

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (2)

Source: cve@gitlab.com
ExploitIssue Tracking
Source: cve@gitlab.com
Permissions Required

Timeline

No history available yet.