An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2023-05-03T00:00:00

Updated: 2024-08-02T05:40:59.892Z

Reserved: 2023-03-07T00:00:00

Link: CVE-2023-1265

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-05-03T21:15:17.307

Modified: 2024-11-21T07:38:47.733

Link: CVE-2023-1265

cve-icon Redhat

No data.