PT-2023-26773
CVE-2023-3907
·
تاريخ النشر
2023-12-17
·
تاريخ التحديث
2024-10-08
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 16.0 through 16.4.3
GitLab EE versions 16.5 through 16.5.3
GitLab EE versions 16.6 through 16.6.1
Description
A privilege escalation issue in GitLab EE allows a project Maintainer to use a Project Access Token to escalate their role to Owner.
Recommendations
For versions 16.0 through 16.4.3, update to version 16.4.4 or later.
For versions 16.5 through 16.5.3, update to version 16.5.4 or later.
For versions 16.6 through 16.6.1, update to version 16.6.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾