PT-2023-29461 · Gitlab · Gitlab

Cryptopone · Published 2023-08-30 · Updated 2025-11-04 · CVE-2023-4522

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GitLab versions prior to 16.2.0

Description An issue has been discovered in GitLab where committing directories containing an LF character results in 500 errors when viewing the commit.

Recommendations For versions prior to 16.2.0, update to version 16.2.0 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-1287

Related Identifiers

BIT-GITLAB-2023-4522

CVE-2023-4522

Affected Products

Gitlab

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4522.json · Exploit
• 🔥 https://gitlab.com/gitlab-org/gitlab/-/issues/406817 · Exploit
• 🔥 https://hackerone.com/reports/1937213 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-4522 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4522 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4522 · Security Note
• https://ubuntu.com/security/CVE-2023-4522 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-2023-4522 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4522 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4522 · Note
• https://t.me/cvenotify/87203 · Telegram Post
• https://t.me/cvenotify/73667 · Telegram Post
• https://twitter.com/CVEnew/status/1696786040168894473 · Twitter Post
• https://t.me/cvenotify/65406 · Telegram Post