An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing public members-only project repositories.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2023-09-29T06:02:51.300Z
Updated: 2024-09-18T04:04:10.193Z
Reserved: 2023-06-06T03:19:59.543Z
Link: CVE-2023-3115
Vulnrichment
Updated: 2024-08-02T06:48:07.189Z
NVD
Status : Analyzed
Published: 2023-09-29T07:15:13.100
Modified: 2023-10-02T19:46:27.487
Link: CVE-2023-3115
Redhat
No data.