CVE-2023-2233

Published: Sep 29, 2023Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 11.8 to 16.2.8
Gitlab Gitlab	From 16.3.0 to 16.3.5
Gitlab Gitlab	From 11.8 to 16.2.8
Gitlab Gitlab	From 16.3.0 to 16.3.5
Gitlab Gitlab	Version 16.4.0
Gitlab Gitlab	Version 16.4.0