CVE-2023-1204

2023-05-0300:00:00

GitLab

www.cve.org

cve-2023-1204

gitlab

security issue

unverified email

user update settings

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically crafted request on user update settings.

CNA Affected

[
  {
    "vendor": "GitLab",
    "product": "GitLab",
    "versions": [
      {
        "version": ">=10.0, <12.9.8",
        "status": "affected"
      },
      {
        "version": ">=12.10, <12.10.7",
        "status": "affected"
      },
      {
        "version": ">=13.0, <13.0.1",
        "status": "affected"
      }
    ]
  }
]