PT-2023-24871

CVE-2023-3443

Published

2023-12-01

Updated

2024-10-03

Description by

CVSS 3.1

3.1

Low

MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab versions 12.1 through 16.4.2 GitLab versions 16.5 through 16.5.2 GitLab versions 16.6 through 16.6.0

Description An issue has been discovered in GitLab where a Guest user could add an emoji on confidential work items.

Recommendations For versions 12.1 through 16.4.2, update to version 16.4.3 or later. For versions 16.5 through 16.5.2, update to version 16.5.3 or later. For versions 16.6 through 16.6.0, update to version 16.6.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ashish_R_Padelkar

Vendors

Affected products

Weakness enumeration

CWE-863: Incorrect Authorization

Related identifiers

CVE-2023-3443