CVE-2023-0518
published 2023-02-13CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.22%
64.9th percentile
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 15.10.8+ds1-2 (sid) | gitlab 15.10.8+ds1-2 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 14.0 < 15.6.7 | 15.6.7 |
| gitlab | gitlab | >= 15.7 < 15.7.6 | 15.7.6 |
| gitlab | gitlab | >= 15.8 < 15.8.1 | 15.8.1 |
| gitlab | gitlab_ce | — | — |
| chrome_chrome | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9mqm-5q47-gj7c: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14
ghsa_unreviewed·2023-02-14
CVE-2023-0518 [HIGH] CWE-400 GHSA-9mqm-5q47-gj7c: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.
OSV
CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14
osv·2023-02-13·CVSS 7.5
CVE-2023-0518 [HIGH] CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.
Chrome
Stable Channel Update for Desktop: CVE-2024-0517
vendor_chrome·2024-01-16·CVSS 8.8
CVE-2024-0517 [HIGH] Stable Channel Update for Desktop: CVE-2024-0517
Stable Channel Update for Desktop
CVE-2024-0517: Out of bounds write in V8. Reported by Toan (suto) Pham of Qrious Secure on 2024-01-06 [$1000][ 1507412 ] High CVE-2024-0518: Type Confusion in V8
Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2023-12-03 [$TBD][ 1517354 ] High CVE-2024-0519: Out of bounds memory access in V8
Severity: high
GitLab
CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, a
vendor_gitlab·2023-02-13·CVSS 4.3
CVE-2023-0518 [MEDIUM] CWE-400 CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, a
CVE-2023-0518: An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.
Debian
CVE-2023-0518: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions starting fro...
vendor_debian·2023·CVSS 4.3
CVE-2023-0518 [MEDIUM] CVE-2023-0518: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions starting fro...
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.
Scope: local
sid: resolved (fixed in 15.10.8+ds1-2)
No detection rules found.
No public exploits indexed.
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0518.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/383082https://hackerone.com/reports/1766973https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0518.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/383082https://hackerone.com/reports/1766973
2023-02-13
Published