Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-1417
HistoryApr 05, 2023 - 12:00 a.m.

CVE-2023-1417

2023-04-0500:00:00
ubuntu.com
ubuntu.com
3
cve-2023-1417
gitlab
unix
security issue

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

6.6

Confidence

Low

An issue has been discovered in GitLab affecting all versions starting from
15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was
possible for an unauthorised user to add child epics linked to victim’s
epic in an unrelated group.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN
ubuntu24.04noarchgitlab-agent< anyUNKNOWN

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

6.6

Confidence

Low