CVE-2023-3443
Incorrect Authorization in GitLab
Summary
Incorrect Authorization in GitLab
Original description
The description as published by the source.
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confidential work items.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.1.0"},{"fixed":"16.4.3"},{"introduced":"16.5.0"},{"fixed":"16.5.3"},{"introduced":"16.6.0"},{"fixed":"16.6.1"}]}]
References
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov