CVE Vulnerabilities

CVE-2021-22197

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Apr 02, 2021 | Modified: Aug 21, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 10.6.0 (including) 13.8.7 (excluding)
Gitlab Gitlab 13.9.0 (including) 13.9.5 (excluding)
Gitlab Gitlab 13.10.0 (including) 13.10.1 (excluding)
Gitlab Ubuntu esm-apps/xenial *
Gitlab Ubuntu xenial *

References