Ubuntu.comUB:CVE-2023-0485CVE-2023-0485
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.003 Low
EPSS
Percentile
71.7%
An issue has been discovered in GitLab affecting all versions starting from
13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all
versions starting from 15.10 before 15.10.1. It was possible that a project
member demoted to a user role to read project updates by doing a diff with
a pre-existing fork.
References
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.003 Low
EPSS
Percentile
71.7%