BIT-gitlab-2025-10903

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2025-10903.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-gitlab-2025-10903
Aliases
Published
2026-09-01T09:05:12Z
Modified
2026-09-08T08:47:41Z
Summary
Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
Details

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature.

Database specific
{
    "cpes":  [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Medium"
}
References

Affected packages

Bitnami / gitlab

Package

Name
gitlab
Purl
pkg:bitnami/gitlab

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
11.10.0
Fixed
19.1.7
Introduced
19.2.0
Fixed
19.2.5
Introduced
19.3.0
Fixed
19.3.1

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2025-10903.json"