An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2023-09-29T07:01:42.219Z
Updated: 2024-09-18T04:07:40.193Z
Reserved: 2023-09-26T10:01:49.676Z
Link: CVE-2023-5198
Vulnrichment
Updated: 2024-08-02T07:52:07.928Z
NVD
Status : Analyzed
Published: 2023-09-29T08:15:09.610
Modified: 2023-10-03T19:47:42.877
Link: CVE-2023-5198
Redhat
No data.