CVE-2023-1071
05.04.2023, 21:15
An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. Due to improper permissions checks it was possible for an unauthorised user to remove an issue from an epic.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 15.5.0 ≤ 𝑥 < 15.8.5 |
| gitlab | gitlab | 15.5.0 ≤ 𝑥 < 15.8.5 |
| gitlab | gitlab | 15.9.0 ≤ 𝑥 < 15.9.4 |
| gitlab | gitlab | 15.9.0 ≤ 𝑥 < 15.9.4 |
| gitlab | gitlab | 15.10.0 |
| gitlab | gitlab | 15.10.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.