VulnerabilitycriticalExploited in the wild

GitLab Releases Urgent Security Patches for Critical Vulnerability

The Hacker Newsby @TheHackersNewsSep 21, 2023 · 03:44 UTC (Sep 21, 2023)1 min read3

Read at thehackernews.com

Analyze CVE-2023-5009 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-5009 CVE-2023-3932 CVE-2021-22205

Tags: cve-2023-5009 cve-2023-3932 cve-2021-22205 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22205	Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)	10.0	100%	KEVRansomwarePoC ×2	Apr 23, 2021 KEV Nov 3, 2021
CVE-2023-3932	An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions…	6.5	<1%	PoC	Aug 3, 2023
CVE-2023-5009	An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4	9.8	8%		Sep 19, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Sep 20, 2023 Vulnerability / Software Security GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user. The issue, tracked as CVE-2023-5009 (CVSS score: 9. 6), impacts all versions of GitLab Enterprise Edition (EE) starting from 13.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.