Lucene search

PRIOn knowledge basePRION:CVE-2023-4700

HistoryNov 06, 2023 - 6:15 p.m.

Authorization

2023-11-0618:15:00

PRIOn knowledge base

www.prio-n.com

gitlab ee

authorization issue

versions 14.7 to 16.5.1

protected environments

bypassing approvals

nvd

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.6%

JSON

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.

CPENameOperatorVersion
gitlabge16.4.0
gitlablt16.4.2
gitlabeq16.5.0
gitlabge14.7.0
gitlablt16.3.6

Name	Operator	Version
gitlab	ge	16.4.0
gitlab	lt	16.4.2
gitlab	eq	16.5.0
gitlab	ge	14.7.0
gitlab	lt	16.3.6

References

gitlab.com/gitlab-org/gitlab/-/issues/421937

hackerone.com/reports/2129826