Vulnerabilities > CVE-2023-6955 - Exposure of Resource to Wrong Sphere vulnerability in Gitlab

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
gitlab
CWE-668

Summary

An improper access control vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group.

Vulnerable Configurations

Part Description Count
Application
Gitlab
2345

Common Weakness Enumeration (CWE)