Lucene search
HistoryJul 13, 2023 - 3:15 a.m.
CVE-2023-3444
gitlab
security
code merge
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
21.4%
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to merge arbitrary code into protected branches.
Affected configurations
Node
gitlabgitlabRange15.3.0–15.11.10community
ORgitlabgitlabRange15.3.0–15.11.10enterprise
ORgitlabgitlabRange16.0.0–16.0.6community
ORgitlabgitlabRange16.0.0–16.0.6enterprise
ORgitlabgitlabRange16.1.0–16.1.1community
ORgitlabgitlabRange16.1.0–16.1.1enterprise
Related
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2023-3444
2023-07-13 00:00:00
debiancve
debiancve
CVE-2023-3444
2023-07-13 03:15:10
veracode
veracode
Resource Injection
2023-07-18 17:23:13
osv
osv
CVE-2023-3444
2023-07-13 03:15:10
BIT-gitlab-2023-3444
2024-03-06 11:04:34
nessus
nessus
GitLab 15.3 < 15.11.10 / 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-3444)
2023-06-29 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (3117e6cd-1772-11ee-9cd6-001b217b3468)
2023-06-30 00:00:00
prion
prion
Code injection
2023-07-13 03:15:00
cve
cve
CVE-2023-3444
2023-07-13 03:15:10
freebsd
freebsd
Gitlab -- Vulnerabilities
2023-06-29 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
21.4%
Related for NVD:CVE-2023-3444