CVE-2023-1417: Medium severity gitlab vulnerability
Published Apr 5, 2023
·Updated
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group.
Affected Software
4 affected components
GitLab GitLab>=15.9.0<15.9.4
GitLab GitLab>=15.9.0<15.9.4
GitLab GitLab=15.10.0
GitLab GitLab=15.10.0
Event History
Apr 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-1417?
CVE-2023-1417 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2023-1417?
To mitigate CVE-2023-1417, update GitLab to version 15.9.4 or 15.10.1 or later.
3
Who is affected by CVE-2023-1417?
CVE-2023-1417 affects all GitLab versions starting from 15.9 before 15.9.4 and all versions starting from 15.10 before 15.10.1.
4
What kind of issue does CVE-2023-1417 describe?
CVE-2023-1417 describes a vulnerability that allows unauthorized users to add child epics to a victim's epic in unrelated groups.
5
When was CVE-2023-1417 discovered?
CVE-2023-1417 was discovered and reported in early 2023.