CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@gitlab.com

Published

2023-04-05

Last modified

2025-02-10

Weaknesses

CWE-285, CWE-862

Affected products

• Gitlab (Gitlab)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1167.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/392715