CVE-2023-1167
05.04.2023, 21:15
Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 12.3.0 ≤ 𝑥 < 15.8.5 |
| gitlab | gitlab | 15.9.0 ≤ 𝑥 < 15.9.4 |
| gitlab | gitlab | 15.10.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.