Lucene search

Ubuntu.comUB:CVE-2023-4630

HistorySep 11, 2023 - 12:00 a.m.

CVE-2023-4630

2023-09-1100:00:00

ubuntu.com

gitlab

security

cve-2023-4630

user access

project imports

unix

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

14.1%

JSON

An issue has been discovered in GitLab affecting all versions starting from
10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all
versions starting from 16.3 before 16.3.1 in which any user can read
limited information about any project’s imports.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	gitlab	< any	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2023-4630

nvd.nist.gov/vuln/detail/CVE-2023-4630

security-tracker.debian.org/tracker/CVE-2023-4630

www.cve.org/CVERecord?id=CVE-2023-4630

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

14.1%

JSON

Related for UB:CVE-2023-4630