Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-2233

Опубликовано: 29 сент. 2023
Источник: nvd
CVSS3: 3.1
CVSS3: 4.3
EPSS Низкий

Описание

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 11.8 (включая) до 16.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 11.8 (включая) до 16.2.8 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.3.0 (включая) до 16.3.5 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.3.0 (включая) до 16.3.5 (исключая)
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 11%
0.00038
Низкий

3.1 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862
NVD-CWE-Other

Связанные уязвимости

CVSS3: 3.1
ubuntu
больше 2 лет назад

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

CVSS3: 3.1
debian
больше 2 лет назад

An improper authorization issue has been discovered in GitLab CE/EE af ...

CVSS3: 3.1
github
больше 2 лет назад

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

EPSS

Процентиль: 11%
0.00038
Низкий

3.1 Low

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-862
NVD-CWE-Other