Vulnerability Database

317,827

Total vulnerabilities in the database

CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

  • Published: Apr 5, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-1167
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
gitlab / gitlab 15.10.0 15.10.0.x
gitlab / gitlab 15.9.0 15.9.4
gitlab / gitlab 12.3.0 15.8.5