CVE-2023-1417
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It wa...
Original description
The description as published by the source.
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.9.0"},{"fixed":"15.9.4"},{"introduced":"15.10.0"},{"fixed":"15.10.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2023-1417 gitlab
References
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov