CVE-2023-4522: Improper Validation of Specified Type of Input in GitLab
First published: Wed Aug 30 2023(Updated: )
An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit.
Credit: cve@gitlab.com cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab GitLab | >=16.2.0 | |
| <16.2.0 |
Remedy
Upgrade to versions 16.2 or above.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this GitLab issue?
The vulnerability ID for this GitLab issue is CVE-2023-4522.
What versions of GitLab are affected by this vulnerability?
All versions starting from 16.2.0 of GitLab are affected by this vulnerability.
What is the severity of CVE-2023-4522?
The severity of CVE-2023-4522 is medium with a CVSS score of 5.3.
How does this vulnerability affect GitLab?
This vulnerability in GitLab causes 500 errors when viewing commits that contain directories with LF characters.
Are there any references for more information about this vulnerability?
Yes, you can find more information about this vulnerability in GitLab at the following references: [1](https://gitlab.com/gitlab-org/gitlab/-/issues/406817) and [2](https://hackerone.com/reports/1937213).
- agent/type
- agent/event
- agent/author
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/references
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- vendor/gitlab
- canonical/gitlab gitlab
- version/gitlab gitlab/16.2.0