{"api_version":"1","generated_at":"2026-09-14T02:57:30+00:00","cve":"CVE-2025-10903","urls":{"html":"https://cve.report/CVE-2025-10903","api":"https://cve.report/api/cve/CVE-2025-10903.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-10903","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-10903"},"summary":{"title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature.","state":"PUBLISHED","assigner":"GitLab","published_at":"2026-08-26 14:17:06","updated_at":"2026-08-31 15:41:10"},"problem_types":["CWE-835","CWE-835 CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"],"metrics":[{"version":"3.1","source":"cve@gitlab.com","type":"Secondary","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://hackerone.com/reports/3292470","name":"https://hackerone.com/reports/3292470","refsource":"cve@gitlab.com","tags":["Permissions Required","Third Party Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/","name":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/","refsource":"cve@gitlab.com","tags":["Release Notes","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/571842","name":"https://gitlab.com/gitlab-org/gitlab/-/work_items/571842","refsource":"cve@gitlab.com","tags":["Issue Tracking","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10903","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10903","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 11.10 19.1.7 semver","platforms":[]},{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 19.2 19.2.5 semver","platforms":[]},{"source":"CNA","vendor":"GitLab","product":"GitLab","version":"affected 19.3 19.3.1 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Upgrade to versions 19.1.7, 19.2.5, 19.3.1 or above.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Thanks [rafabd1](https://hackerone.com/rafabd1) for reporting this vulnerability through our HackerOne bug bounty program","lang":"en"}],"nvd_cpes":[{"cve_year":"2025","cve_id":"10903","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitlab","cpe5":"gitlab","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"enterprise","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"10903","cve":"CVE-2025-10903","epss":"0.004220000","percentile":"0.351670000","score_date":"2026-08-30","updated_at":"2026-08-31 00:14:05"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-10903","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-08-26T15:43:02.084655Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-08-26T15:43:12.549Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"GitLab","repo":"git://git@gitlab.com:gitlab-org/gitlab.git","vendor":"GitLab","versions":[{"lessThan":"19.1.7","status":"affected","version":"11.10","versionType":"semver"},{"lessThan":"19.2.5","status":"affected","version":"19.2","versionType":"semver"},{"lessThan":"19.3.1","status":"affected","version":"19.3","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Thanks [rafabd1](https://hackerone.com/rafabd1) for reporting this vulnerability through our HackerOne bug bounty program"}],"descriptions":[{"lang":"en","value":"GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-835","description":"CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-26T13:37:00.097Z","orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","shortName":"GitLab"},"references":[{"name":"HackerOne Bug Bounty Report #3292470","tags":["technical-description","exploit","permissions-required"],"url":"https://hackerone.com/reports/3292470"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/571842"},{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/"}],"solutions":[{"lang":"en","value":"Upgrade to versions 19.1.7, 19.2.5, 19.3.1 or above."}],"title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab"}},"cveMetadata":{"assignerOrgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","assignerShortName":"GitLab","cveId":"CVE-2025-10903","datePublished":"2026-08-26T13:37:00.097Z","dateReserved":"2025-09-24T00:33:27.922Z","dateUpdated":"2026-08-26T15:43:12.549Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-08-26 14:17:06","lastModifiedDate":"2026-08-31 15:41:10","problem_types":["CWE-835","CWE-835 CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-26T15:43:02.084655Z","id":"CVE-2025-10903","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"11.1.0","versionEndExcluding":"19.1.7","matchCriteriaId":"D364E33A-A890-4301-A2D9-E54284A70AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"19.2.0","versionEndExcluding":"19.2.5","matchCriteriaId":"80975E60-F9E7-41D6-A1CA-384E3CA3964D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:19.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"99734371-8B08-4207-88EB-D23AE5608E9D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"10903","Ordinal":"1","Title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","CVE":"CVE-2025-10903","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"10903","Ordinal":"1","NoteData":"GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature.","Type":"Description","Title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab"}]}}}