PT-2023-17186

CVE-2023-1708

Published

2023-04-05

Updated

2026-10-07

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 1.0 through 15.8.4 GitLab CE/EE versions 15.9 through 15.9.3 GitLab CE/EE versions 15.10 through 15.10.0

Description An issue was identified in GitLab CE/EE where non-printable characters get copied from the clipboard, allowing unexpected commands to be executed on the victim machine.

Recommendations For versions 1.0 through 15.8.4, update to version 15.8.5 or later. For versions 15.9 through 15.9.3, update to version 15.9.4 or later. For versions 15.10 through 15.10.0, update to version 15.10.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers

CVE-2023-1708