Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2023-5226

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI.

  • Published: Dec 1, 2023
  • Updated: Dec 7, 2023
  • CVE: CVE-2023-5226
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

No CWE or OWASP classifications available.

Software From Fixed in
gitlab / gitlab 16.5.0 16.5.3
gitlab / gitlab 16.6.0 16.6.0.x
gitlab / gitlab - 16.4.3