Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2589

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker can clone a repository from a public project, from a disallowed IP, even after the top-level group has enabled IP restrictions on the group.

Published

2023-06-07T17:15:10.330

Last Modified

2025-01-07T17:15:14.747

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-346
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 15.10.8 Yes
Application gitlab gitlab < 15.10.8 Yes
Application gitlab gitlab < 15.11.7 Yes
Application gitlab gitlab < 15.11.7 Yes
Application gitlab gitlab < 16.0.2 Yes
Application gitlab gitlab < 16.0.2 Yes
References