An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2023-05-03T00:00:00
Updated: 2024-08-02T05:40:59.892Z
Reserved: 2023-03-07T00:00:00
Link: CVE-2023-1265
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-05-03T21:15:17.307
Modified: 2024-11-21T07:38:47.733
Link: CVE-2023-1265
Redhat
No data.