PT-2024-1686 · Gitlab · Gitlab Ce/Ee+1

Js_Noob · Published 2024-02-07 · Updated 2024-10-03 · CVE-2023-6840

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:M/C:P/I:C/A:C

Name of the Vulnerable Software and Affected Versions GitLab EE versions 16.4 through 16.6.7 GitLab EE versions 16.7 through 16.7.5 GitLab EE versions 16.8 through 16.8.2

Description The issue allows a maintainer to change the name of a protected branch, bypassing the security policy added to block merge requests. This is related to insufficient access control in the GitLab platform. An attacker could exploit this to remotely bypass existing security restrictions.

Recommendations For GitLab EE versions 16.4 through 16.6.7, update to version 16.6.7 or later. For GitLab EE versions 16.7 through 16.7.5, update to version 16.7.5 or later. For GitLab EE versions 16.8 through 16.8.2, update to version 16.8.2 or later.

Exploit

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

BDU:2024-01374

BIT-GITLAB-2023-6840

CVE-2023-6840

Affected Products

Gitlab

Gitlab Ce/Ee

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6840.json · Exploit
• 🔥 https://hackerone.com/reports/2280292 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-6840 · Security Note
• https://osv.dev/vulnerability/BIT-gitlab-2023-6840 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-6840 · Security Note
• https://ubuntu.com/security/CVE-2023-6840 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01374 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6840 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6840 · Vendor Advisory
• https://t.me/cvenotify/70510 · Telegram Post
• https://twitter.com/CVEnew/status/1755354392814055666 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1755376454420828492 · Twitter Post
• https://vuldb.com/?id.253156 · Note
• https://t.me/cvenotify/70559 · Telegram Post
• https://about.gitlab.com/releases/2024/02/07/security-release-gitlab-16-8-2-released · Note