7 matches found
CVE-2023-3511
creationtimestamp| type| source ---|---|--- 2024-01-11 15:52:14+00:00| seen| https://t.me/ctinow/166580...
CVE-2023-3511
An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merge requests to private projects they're not a...
CVE-2023-3511 Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merge requests to private projects they're not a...
CVE-2023-3511
CVE-2023-3511 : GitLab EE contains a logic/authorization flaw affecting all versions from 8.17 up to 16.4.3, 16.5.0 up to 16.5.3, and 16.6.0 up to 16.6.1. The issue allows auditor users to fork and submit merge requests to private projects they are not a member of. Exploitation details are not pr...
CVE-2023-3511
Removed by vendor...
FreeBSD : Gitlab -- vulnerabilities (e2fb85ce-9a3c-11ee-af26-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e2fb85ce-9a3c-11ee-af26-001b217b3468 advisory. - Gitlab reports: Smartcard authentication allows impersonation of arbitrary user using user's...
GitLab 8.17 < 16.4.4 / 16.5 < 16.5.4 / 16.6 < 16.6.2 (CVE-2023-3511)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was...