An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. This vulnerability allows for bypassing the 'group ip restriction' settings to access environment details of projects
Metrics
Affected Vendors & Products
References
History
Thu, 19 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-02-22T00:02:43.649Z
Updated: 2024-09-18T04:07:20.184Z
Reserved: 2023-09-11T15:01:08.122Z
Link: CVE-2023-4895
Vulnrichment
Updated: 2024-08-02T07:38:01.031Z
NVD
Status : Analyzed
Published: 2024-02-22T01:15:07.780
Modified: 2024-03-04T20:15:42.960
Link: CVE-2023-4895
Redhat
No data.