Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2023-3484

An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starting from 16.0 before 16.0.7, all versions starting from 16.1 before 16.1.2. An attacker could change the name or path of a public top-level group in certain situations.

Published: Jul 21, 2023
Updated: Aug 1, 2023
CVE: CVE-2023-3484
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
gitlab / gitlab	16.1.0	16.1.2
gitlab / gitlab	16.0.0	16.0.7
gitlab / gitlab	12.8.0	15.11.11

https://about.gitlab.com/releases/2023/07/05/security-release-gitlab-16-1-2-released/
https://gitlab.com/gitlab-org/gitlab/-/issues/416773
https://hackerone.com/reports/2035687

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo