CVE-2023-0805: High severity gitlab vulnerability
An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to have access to the public projects of a public group even after being banned from the public group by the owner.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0805?
The severity of CVE-2023-0805 is categorized as high due to the potential for unauthorized access to sensitive project data.
How do I fix CVE-2023-0805?
To fix CVE-2023-0805, upgrade GitLab EE to version 15.9.6, 15.10.5, or 15.11.1 or later.
Who is affected by CVE-2023-0805?
CVE-2023-0805 affects all GitLab EE versions from 15.2 to earlier than 15.9.6, 15.10 to earlier than 15.10.5, and 15.11 to earlier than 15.11.1.
What impact does CVE-2023-0805 have on GitLab?
CVE-2023-0805 allows a malicious group member to maintain access to public projects even after leaving the group.
Is there a workaround for CVE-2023-0805?
Currently, there are no recommended workarounds for CVE-2023-0805 other than applying the necessary updates.