Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5356
HistoryJan 12, 2024 - 2:15 p.m.

Authorization

2024-01-1214:15:00
PRIOn knowledge base
www.prio-n.com
3
gitlab
authorization
slack/mattermost

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.9%