Lucene search
Veracode Vulnerability DatabaseVERACODE:44854HistoryDec 26, 2023 - 5:16 p.m.
Improper Access Control
2023-12-2617:16:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
gitlab
access control
permission validation
vulnerability
compromised system
Gitlab is vulnerable to Improper Access Control. The vulnerability is caused due to improper permission validation while granting access to git lab projects. An attacker can fork a project outside of current group and can compromise the target system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
nessus
nessus
GitLab 13.3 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-4638)
2023-08-31 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (aaea7b7c-4887-11ee-b164-001b217b3468)
2023-09-01 00:00:00
ubuntucve
ubuntucve
CVE-2023-4638
2023-09-11 00:00:00
debiancve
debiancve
CVE-2023-4638
2023-09-01 10:49:10
freebsd
freebsd
Gitlab -- Vulnerabilities
2023-08-31 00:00:00