PT-2023-16279 · Gitlab · Gitlab

Inspector-Ambitious · Published 2023-04-05 · Updated 2024-03-06 · CVE-2023-0450

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab versions 8.1 through 15.8.5 GitLab versions 15.9 through 15.9.4 GitLab versions 15.10 through 15.10.1

Description An issue has been discovered in GitLab where it was possible to add a branch with an ambiguous name, which could be used to social engineer users.

Recommendations For versions 8.1 through 15.8.5, update to a version outside of this range to mitigate the risk. For versions 15.9 through 15.9.4, update to a version outside of this range to mitigate the risk. For versions 15.10 through 15.10.1, update to a version outside of this range to mitigate the risk.

Exploit

Fix

Related Identifiers

BIT-GITLAB-2023-0450

CVE-2023-0450

Affected Products

Gitlab

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0450.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0450 · Security Note
• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0450.json · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-0450 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-0450 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-0450 · Security Note
• https://osv.dev/vulnerability/BIT-gitlab-2023-0450 · Vendor Advisory
• https://gitlab.com/gitlab-org/gitlab/-/issues/388962 · Note
• https://t.me/cibsecurity/61515 · Telegram Post
• https://hackerone.com/reports/1831547 · Note