CVE Vulnerabilities

CVE-2023-4317

Published: Dec 01, 2023 | Modified: Dec 06, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a user with the Developer role to update a pipeline schedule from an unprotected branch to a protected branch.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 9.2.0 (including) 16.4.3 (excluding)
Gitlab Gitlab 16.5.0 (including) 16.5.3 (excluding)
Gitlab Gitlab 16.6.0 (including) 16.6.0 (including)

References