Lucene search
PRIOn knowledge basePRION:CVE-2023-4812HistoryJan 12, 2024 - 2:15 p.m.
Cross site request forgery (csrf)
2024-01-1214:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site request forgery
gitlab
vulnerability
codeowners approval
merge request
An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.
Related
cve
cve
CVE-2023-4812
2024-01-12 14:15:48
cvelist
cvelist
CVE-2023-4812 Improper Access Control in GitLab
2024-01-12 13:56:56
veracode
veracode
Improper Access Control
2024-01-29 17:37:25
osv
osv
CVE-2023-4812
2024-01-12 14:15:48
BIT-gitlab-2023-4812
2024-03-06 10:58:30
nvd
nvd
CVE-2023-4812
2024-01-12 14:15:48
ubuntucve
ubuntucve
CVE-2023-4812
2024-01-12 00:00:00
nessus
nessus
GitLab 15.3 < 16.5.6 / 16.6 < 16.6.4 / 16.7 < 16.7.2 (CVE-2023-4812)
2024-01-11 00:00:00
FreeBSD : Gitlab -- vulnerabilities (4c8c2218-b120-11ee-90ec-001b217b3468)
2024-01-12 00:00:00
debiancve
debiancve
CVE-2023-4812
2024-01-12 14:15:48
freebsd
freebsd
Gitlab -- vulnerabilities
2024-01-11 00:00:00