Vulnerability Database

300,926

Total vulnerabilities in the database

CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

  • Published: Apr 5, 2023
  • Updated: Apr 14, 2023
  • CVE: CVE-2023-1167
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 15.10.0 15.10.0.x
gitlab / gitlab 15.9.0 15.9.4
gitlab / gitlab 12.3.0 15.8.5