Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0319

An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1, allowing to read environment names supposed to be restricted to project memebers only.

Published

2023-04-05T20:15:07.403

Last Modified

2025-02-11T17:15:14.810

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.8 (MEDIUM)

Weaknesses

Type: Primary
CWE-863
Type: Secondary
CWE-284

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gitlab	gitlab	< 15.8.5	Yes
Application	gitlab	gitlab	< 15.8.5	Yes
Application	gitlab	gitlab	< 15.9.4	Yes
Application	gitlab	gitlab	< 15.9.4	Yes
Application	gitlab	gitlab	15.10.0	Yes
Application	gitlab	gitlab	15.10.0	Yes

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0319.json Vendor Advisory ([email protected])
https://gitlab.com/gitlab-org/gitlab/-/issues/388096 Broken Link ([email protected])
https://hackerone.com/reports/1817586 Permissions Required ([email protected])
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0319.json Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://gitlab.com/gitlab-org/gitlab/-/issues/388096 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://hackerone.com/reports/1817586 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)