4.3

CVE-2023-1071

An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. Due to improper permissions checks it was possible for an unauthorised user to remove an issue from an epic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ GitLab SwEdition community Version >= 15.5.0 < 15.8.5
Gitlab ≫ GitLab SwEdition enterprise Version >= 15.5.0 < 15.8.5
Gitlab ≫ GitLab SwEdition community Version >= 15.9.0 < 15.9.4
Gitlab ≫ GitLab SwEdition enterprise Version >= 15.9.0 < 15.9.4
Gitlab ≫ GitLab Version 15.10.0 SwEdition community
Gitlab ≫ GitLab Version 15.10.0 SwEdition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.323
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
cve@gitlab.com 3.1 1.6 1.4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1071.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/385434
Broken Link