← back
CVE-2023-1167

CVE-2023-1167

CVSS 5.3 MEDIUMEPSS 0.6%CWE-285
Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
GitLab · GitLab

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1167.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/392715