← voltar
CVE-2023-3443

Incorrect Authorization in GitLab

CVSS 3.1 LOWEPSS 0.4%CWE-863
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confidential work items.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
GitLab · GitLab

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://gitlab.com/gitlab-org/gitlab/-/issues/416497https://hackerone.com/reports/2036500