Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

GitLab addressed critical vulnerability CVE-2023

Security Affairsby @securityaffairs ()1 min read3
Read at securityaffairs.com
Analyze CVE-2023-5009 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-5009CVE-2023-3932
Tags
cve-2023-5009cve-2023-3932vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-3932
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions…
6.5<1%PoC
CVE-2023-5009
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4
9.88%

From the original article

1 min read at securityaffairs.com

GitLab rolled out security patches to address a critical vulnerability, tracked as CVE-2023-5009, that can be exploited to run pipelines as another user. GitLab has released security patches to address a critical vulnerability, tracked as CVE-2023-5009 (CVSS score: 9. 6), that allows an attacker to run pipelines as another user.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.