VDB

CVE-2025-0290

CVE-2025-0290 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing of CI artifacts metadata could cause background jobs to become unresponsive.

EPSS 0.03% · 9.4th percentile

Risk Scores

EPSS Score
0.03%
9.4th percentile

Affected Products

VendorProductVersions
Bitnamigitlab17.7.0, 15.0.0, 17.8.0
Bitnamigitlab15.0.0, 17.7.0, 17.8.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Jan 28, 2025 CVE Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 28, 2025 PoC Published
  • Jan 29, 2025 EPSS Score
  • Feb 13, 2025 EPSS Score
  • Feb 15, 2025 Coalition ESS Score
  • Feb 28, 2025 EPSS Score
  • Mar 15, 2025 EPSS Score
  • Mar 30, 2025 EPSS Score
  • Apr 14, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›