Lucene search
Veracode Vulnerability DatabaseVERACODE:44825HistoryDec 26, 2023 - 12:29 a.m.
Improper Access Control
2023-12-2600:29:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
gitlab
vulnerability
improper access control
emojis
confidential
work items
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Gitlab is vulnerable to Improper access control. It is possible for a Guest user to add an emoji on confidential work items.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
prion
prion
Design/Logic Flaw
2023-12-01 07:15:00
ubuntucve
ubuntucve
CVE-2023-3443
2023-12-01 00:00:00
cvelist
cvelist
CVE-2023-3443 Improper Access Control in GitLab
2023-12-01 07:02:33
nvd
nvd
CVE-2023-3443
2023-12-01 07:15:07
nessus
nessus
GitLab 12.1 < 16.4.3 / 16.5 < 16.5.3 / 16.6 < 16.6.1 (CVE-2023-3443)
2023-12-07 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (3b14b2b4-9014-11ee-98b3-001b217b3468)
2023-12-01 00:00:00
debiancve
debiancve
CVE-2023-3443
2023-12-01 07:15:07
cve
cve
CVE-2023-3443
2023-12-01 07:15:07
osv
osv
BIT-gitlab-2023-3443
2024-03-06 11:04:44
CVE-2023-3443
2023-12-01 07:15:07
freebsd
freebsd
Gitlab -- Vulnerabilities
2023-11-30 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for VERACODE:44825