CVE-2023-5995
Incorrect Authorization in GitLab
Summary
Incorrect Authorization in GitLab
Original description
The description as published by the source.
An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.2.0"},{"fixed":"16.4.3"},{"introduced":"16.5.0"},{"fixed":"16.5.3"},{"introduced":"16.6.0"},{"fixed":"16.6.1"}]}]
References
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov