Lucene search
Veracode Vulnerability DatabaseVERACODE:44867HistoryDec 27, 2023 - 3:58 a.m.
CGI Abuse
2023-12-2703:58:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
gitlab
vulnerability
cgi abuse
unauthorized access
pipeline execution
system compromise
6.9 Medium
AI Score
Confidence
High
Gitlab is vulnerable to CGI Abuse. An attacker can abuse scan execution policies to run pipelines as another user compromising Confidentiality and Integrity of the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
ubuntucve
ubuntucve
CVE-2023-4998
2023-09-21 00:00:00
nessus
nessus
GitLab 0.0 < 16.2.7 / 16.3 < 16.3.4 (CVE-2023-4998)
2023-09-18 00:00:00
FreeBSD : Gitlab -- vulnerability (32a4896a-56da-11ee-9186-001b217b3468)
2023-09-19 00:00:00
debiancve
debiancve
CVE-2023-4998
2023-09-19 17:02:25
freebsd
freebsd
Gitlab -- vulnerability
2023-09-18 00:00:00