CVE-2023-0450: Medium severity gitlab vulnerability
Published Apr 5, 2023
·Updated
An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used to social engineer users.
Affected Software
6 affected components
GitLab GitLab>=8.1.0<15.8.5
GitLab GitLab>=8.1.0<15.8.5
GitLab GitLab>=15.9.0<15.9.4
GitLab GitLab>=15.9.0<15.9.4
GitLab GitLab=15.10.0
GitLab GitLab=15.10.0
Event History
Apr 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-0450?
CVE-2023-0450 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2023-0450?
To mitigate CVE-2023-0450, you should upgrade GitLab to version 15.9.5 or later.
3
Which versions of GitLab are affected by CVE-2023-0450?
CVE-2023-0450 affects GitLab versions from 8.1 to 15.8.5, from 15.9 to 15.9.4, and specifically 15.10.0.
4
What type of vulnerability is CVE-2023-0450?
CVE-2023-0450 is a social engineering vulnerability that allows the addition of a branch with an ambiguous name.
5
Can CVE-2023-0450 affect GitLab Community and Enterprise Editions?
Yes, CVE-2023-0450 affects both GitLab Community and Enterprise Editions across the specified versions.