Lucene search
HistoryDec 17, 2023 - 11:15 p.m.
CVE-2023-3907
gitlab
privilege escalation
vulnerability
project maintainer
project access token
owner
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.9%
A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner
Affected configurations
Node
gitlabgitlabRange16.0.0–16.4.4enterprise
ORgitlabgitlabRange16.5–16.5.4enterprise
ORgitlabgitlabRange16.6–16.6.2enterprise
Related
debiancve
debiancve
CVE-2023-3907
2023-12-17 23:15:43
osv
osv
BIT-gitlab-2023-3907
2024-03-06 11:03:07
CVE-2023-3907
2023-12-17 23:15:43
prion
prion
Privilege escalation
2023-12-17 23:15:00
ubuntucve
ubuntucve
CVE-2023-3907
2023-12-17 00:00:00
nessus
nessus
GitLab 16.0 < 16.4.4 / 16.5 < 16.5.4 / 16.6 < 16.6.2 (CVE-2023-3907)
2023-12-14 00:00:00
FreeBSD : Gitlab -- vulnerabilities (e2fb85ce-9a3c-11ee-af26-001b217b3468)
2023-12-14 00:00:00
cve
cve
CVE-2023-3907
2023-12-17 23:15:43
cvelist
cvelist
CVE-2023-3907 Improper Privilege Management in GitLab
2023-12-17 23:02:36
freebsd
freebsd
Gitlab -- vulnerabilities
2023-12-13 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.9%
Related for NVD:CVE-2023-3907