Vulnerabilities > CVE-2023-1417 - Incorrect Authorization vulnerability in Gitlab

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
gitlab
CWE-863
NVD
Published: 2023-04-05
Updated: 2024-11-21

Summary

An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group.

Vulnerable Configurations

Part Description Count
Application
Gitlab
8

Common Weakness Enumeration (CWE)

References