PT-2023-24871

CVE-2023-3443

Publicado

2023-12-01

Atualizado

2024-10-03

Descrição por

CVSS 3.1

3.1

Baixa

MétricasAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab versions 12.1 through 16.4.2 GitLab versions 16.5 through 16.5.2 GitLab versions 16.6 through 16.6.0

Description An issue has been discovered in GitLab where a Guest user could add an emoji on confidential work items.

Recommendations For versions 12.1 through 16.4.2, update to version 16.4.3 or later. For versions 16.5 through 16.5.2, update to version 16.5.3 or later. For versions 16.6 through 16.6.0, update to version 16.6.1 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Ashish_R_Padelkar

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-863: Incorrect Authorization

Identificadores relacionados

CVE-2023-3443