CVE-2023-5226
published 2023-12-01CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.55%
41.7th percentile
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 16.4.4+ds2-2 (sid) | gitlab 16.4.4+ds2-2 (sid) |
| gitlab | gitlab | < 16.4.3 | 16.4.3 |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 16.5 < 16.5.3 | 16.5.3 |
| gitlab | gitlab | >= 16.5.0 < 16.5.3 | 16.5.3 |
| gitlab | gitlab | >= 16.6 < 16.6.1 | 16.6.1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
osv7.5HIGH
vendor_redhat10.0CRITICAL
vendor_debian4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6wgj-fxqf-wxj2: An issue has been discovered in GitLab affecting all versions before 16
ghsa_unreviewed·2023-12-01
CVE-2023-5226 [MEDIUM] CWE-94 GHSA-6wgj-fxqf-wxj2: An issue has been discovered in GitLab affecting all versions before 16
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.
OSV
CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16
osv·2023-12-01·CVSS 7.5
CVE-2023-5226 [HIGH] CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.
GitLab
CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from
vendor_gitlab·2023-12-01·CVSS 4.8
CVE-2023-5226 [MEDIUM] CWE-94 CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from
CVE-2023-5226: An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.
Red Hat
flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console
vendor_redhat·2023-03-16·CVSS 10.0
CVE-2023-28100 [CRITICAL] CWE-20 flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console
flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.1
Debian
CVE-2023-5226: gitlab - An issue has been discovered in GitLab affecting all versions before 16.4.3, all...
vendor_debian·2023·CVSS 4.8
CVE-2023-5226 [MEDIUM] CVE-2023-5226: gitlab - An issue has been discovered in GitLab affecting all versions before 16.4.3, all...
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.
Scope: local
sid: resolved (fixed in 16.4.4+ds2-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-12-01
Published