← CVE Intelligence

CVE-2023-5825

Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to exhaust all available memory through an infinite loop and cause Denial of Service.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 16.2 before 16.3.6; affected 16.4 before 16.4.2; affected 16.5 before 16.5.1

CWE

CWE-835

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.