CVE-2025-13335: Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.
Other sources
GitLab has remediated an issue that under certain circumstances could have allowed an authenticated user to create a denial of service condition by configuring malformed Wiki documents that bypass cycle detection.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-13335?
CVE-2025-13335 is classified as a high-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2025-13335?
To fix CVE-2025-13335, you should upgrade to GitLab versions 18.8.3 or later, or the appropriate patched versions as specified.
What products are affected by CVE-2025-13335?
CVE-2025-13335 affects GitLab CE and EE versions between 17.1 and 18.8.2.
Can CVE-2025-13335 be exploited by unauthenticated users?
No, CVE-2025-13335 requires authentication to exploit, targeting authenticated users.
What type of vulnerability is CVE-2025-13335?
CVE-2025-13335 is an infinite loop vulnerability that can create a denial of service condition.