CVE-2023-1621 — Gitlab vulnerability

4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
1.2%
top 21.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
GitlabDebian GitlabGitlab EE
Timeline
PublishedJun 6

Description

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to projects even from a restricted IP address.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

▶NVDgitlab/gitlab12.0.0 — 15.10.5+1
▶CVEListV5gitlab/gitlab>=12.0, <15.10.5, >=15.11, <15.11.1+1
▶debiandebian/gitlab
▶gitlabgitlab/gitlab

🔴Vulnerability Details

1
GHSA
GHSA-p5fq-m9jh-pjrv: An issue has been discovered in GitLab EE affecting all versions starting from 12↗2023-06-06
▶

📋Vendor Advisories

2
GitLab
CVE-2023-1621: An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A↗2023-06-06
▶
Debian
CVE-2023-1621: gitlab - An issue has been discovered in GitLab EE affecting all versions starting from 1...↗2023
▶