by Kastro
Paper/Archive/CVE-2023-5009

CVE-2023-5009

GitLab GitLab — Incorrect Authorization in GitLab

EPSS 10%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.5.955 × 2019.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.

Affected

ProductAffectedFixed inSource
GitLab13.12 – < 16.2.716.2.7CNA
GitLab16.3 – < 16.3.416.3.4CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitLab (CNA)8.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgitlab.com/gitlab-org/gitlab/-/issues/425304exploithackerone.com/reports/2147126