Lucene search

GoogleOSV:BIT-GITLAB-2023-5332

HistoryMar 06, 2024 - 10:56 a.m.

BIT-gitlab-2023-5332

2024-03-0610:56:56

Google

osv.dev

third party library

consul

patch

enable-script-checks

bypass

gitlab-ee

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.3%

JSON

Patch in third party library Consul requires ‘enable-script-checks’ to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.

CPENameOperatorVersion
gitlabge16.4.0
gitlabge16.3.0
gitlablt16.2.8
gitlable16.4.0
gitlablt16.3.5
gitlabge9.5.0

Name	Operator	Version
gitlab	ge	16.4.0
gitlab	ge	16.3.0
gitlab	lt	16.2.8
gitlab	le	16.4.0
gitlab	lt	16.3.5
gitlab	ge	9.5.0

References

gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8171

www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.3%

JSON

Related for OSV:BIT-GITLAB-2023-5332