Lucene search
PRIOn knowledge basePRION:CVE-2023-3385HistoryAug 02, 2023 - 12:15 a.m.
Design/Logic Flaw
2023-08-0200:15:00
PRIOn knowledge base
www.prio-n.com
6
gitlab
vulnerability
unauthorizedaccess
fileupload
securityissue
logicflaw
tarbug
nvd
An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project ‘from export’ could access and read unrelated files via uploading a specially crafted file. This was due to a bug in tar, fixed in tar-1.35.
Related
nessus
nessus
GitLab 8.10 < 16.0.8 / 16.1.0 < 16.1.3 / 16.2.0 < 16.2.2 (CVE-2023-3385)
2023-08-08 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (fa239535-30f6-11ee-aef9-001b217b3468)
2023-08-02 00:00:00
osv
osv
CVE-2023-3385
2023-08-02 00:15:18
BIT-gitlab-2023-3385
2024-03-06 11:05:38
cve
cve
CVE-2023-3385
2023-08-02 00:15:18
redhatcve
redhatcve
CVE-2023-3385
2023-10-09 17:56:45
ubuntucve
ubuntucve
CVE-2023-3385
2023-08-02 00:00:00
debiancve
debiancve
CVE-2023-3385
2023-08-02 00:15:18
cvelist
cvelist
nvd
nvd
CVE-2023-3385
2023-08-02 00:15:18
veracode
veracode
Information Disclosure
2023-10-08 04:39:54
freebsd
freebsd
Gitlab -- Vulnerabilities
2023-08-01 00:00:00