BIT-gitlab-2023-6955

vendorUSosv

Missing Authorization in GitLab

view advisory published 2024-03-06Licence: per source

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-6955US	medium5.3OT elevated	0.55% (46th)	—	2024-01-12
A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This conditio…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/gitlab/-/issues/432188ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-6955WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan