BIT-gitlab-2025-10903

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2025-10903.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gitlab-2025-10903

Aliases

CVE-2025-10903

Published

2026-09-01T09:05:12.987Z

Modified

2026-09-01T09:15:08.214026573Z

Summary

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

Details

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature.

Database specific

{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
    ]
}

References

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

11.1.0

Fixed

19.1.7

Introduced

19.2.0

Fixed

19.2.5

Introduced

19.3.0

Fixed

19.3.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2025-10903.json"