Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-0042
HistoryJan 12, 2023 - 12:00 a.m.

CVE-2023-0042

2023-01-1200:00:00
ubuntu.com
ubuntu.com
25
gitlab ce/ee
arbitrary protocol
redirection
security issue

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.5%

An issue has been discovered in GitLab CE/EE affecting all versions
starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to
15.7.2. GitLab Pages allows redirection to arbitrary protocols.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

32.5%