Lucene search

K
osvGoogleOSV:BIT-GITLAB-2023-5933
HistoryMar 06, 2024 - 10:55 a.m.

BIT-gitlab-2023-5933

2024-03-0610:55:55
Google
osv.dev
4
gitlab
security
input sanitization
api
put requests
vulnerability
software

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.8%

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.8%