Unrated

Missing Authorization in GitLab

CVE-2023-4700 First seen on SecPulse Nov 7, 2023

Original description The description as published by the source.

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Key facts

Severity: Unrated
Published: Nov 7, 2023
First seen on SecPulse: Nov 7, 2023
CWE: CWE-862

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:59