Lucene search
GoogleOSV:CVE-2023-2182HistoryMay 03, 2023 - 10:15 p.m.
CVE-2023-2182
2023-05-0322:15:19
Google
osv.dev
7
cve-2023-2182
gitlab ee
privilege escalation
openid connect
security issue
software vulnerability
An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions when OpenID Connect is enabled on an instance, it may allow users who are marked as ‘external’ to become ‘regular’ users thus leading to privilege escalation for those users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab | eq | 15.10.1-ee | |
| gitlab | eq | 15.10.4-ee | |
| gitlab | eq | 15.10.3-ee | |
| gitlab | eq | 15.10.0-ee | |
| gitlab | eq | 15.10.2-ee |
Related
prion
prion
Design/Logic Flaw
2023-05-03 22:15:00
osv
osv
BIT-gitlab-2023-2182
2024-03-06 11:09:12
nessus
nessus
GitLab 15.10 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-2182)
2023-05-02 00:00:00
debiancve
debiancve
CVE-2023-2182
2023-05-03 22:15:19
nvd
nvd
CVE-2023-2182
2023-05-03 22:15:19
cve
cve
CVE-2023-2182
2023-05-03 22:15:19
cvelist
cvelist
CVE-2023-2182
2023-05-03 00:00:00
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2023-05-02 00:00:00