CVE-2023-2233CWE-862

Missing Authorization in GitLab

Low · published September 29, 2023

CVSS v3.1
3.1
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-09-29T06:30Z
EPSS history
Timeline
  • 29 SEP 06:30Z
    Missing Authorization in GitLab
    cvelistv5