CVE-2023-3511

An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merge requests to private projects they're not a member of.

CVSS v3 3.5 LOW

3.5^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/416961	Broken Link
https://hackerone.com/reports/2046752	Permissions Required

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

History

19 Dec 2023, 21:14

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~2.0~~	v2 : unknown v3 : 3.5
First Time		Gitlab Gitlab gitlab
CWE		NVD-CWE-Other
CPE		cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
Summary		(es) Se descubrió un problema en GitLab EE que afecta a todas las versiones desde 8.17 anteriores a 16.4.4, todas las versiones desde 16.5 anteriores a 16.5.4, todas las versiones desde 16.6 anteriores a 16.6.2. Los usuarios auditores pudieron bifurcar y enviar solicitudes de fusión a proyectos privados de los que no son miembros.
References	~~() https://gitlab.com/gitlab-org/gitlab/-/issues/416961 -~~	() https://gitlab.com/gitlab-org/gitlab/-/issues/416961 - Broken Link
References	~~() https://hackerone.com/reports/2046752 -~~	() https://hackerone.com/reports/2046752 - Permissions Required

15 Dec 2023, 16:53

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-15 16:15

Updated : 2023-12-19 21:14

NVD link : CVE-2023-3511

Mitre link : CVE-2023-3511

CVE.ORG link : CVE-2023-3511

JSON object : View

Products Affected

gitlab

gitlab

CWE

NVD-CWE-Other CWE-284

Improper Access Control

{"id": "CVE-2023-3511", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.1}, {"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.0, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 0.5}]}, "published": "2023-12-15T16:15:43.053", "references": [{"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/416961", "tags": ["Broken Link"], "source": "cve@gitlab.com"}, {"url": "https://hackerone.com/reports/2046752", "tags": ["Permissions Required"], "source": "cve@gitlab.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "cve@gitlab.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merge requests to private projects they're not a member of."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en GitLab EE que afecta a todas las versiones desde 8.17 anteriores a 16.4.4, todas las versiones desde 16.5 anteriores a 16.5.4, todas las versiones desde 16.6 anteriores a 16.6.2. Los usuarios auditores pudieron bifurcar y enviar solicitudes de fusi\u00f3n a proyectos privados de los que no son miembros."}], "lastModified": "2023-12-19T21:14:37.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "FF46E870-A12D-45CF-9265-63BEC4068D7D", "versionEndExcluding": "16.4.4", "versionStartIncluding": "8.17"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "B9D88266-872E-4BD9-B3DF-D1C540E66AFD", "versionEndExcluding": "16.5.4", "versionStartIncluding": "16.5"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "D5C45787-C8C9-432E-8DAF-6F5264BBE0B3", "versionEndExcluding": "16.6.2", "versionStartIncluding": "16.6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@gitlab.com"}