VULNERABILITY INTELLIGENCE

CVE-2023-0319

CVSS score5.8 MEDIUM

EPSS probability0.74%

CISA KEVNot currently listed

Published2023-04-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Description

An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1, allowing to read environment names supposed to be restricted to project memebers only.

Weakness classification

nvd@nist.gov: CWE-863
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references

cve@gitlab.com — Vendor Advisory
cve@gitlab.com — Broken Link
cve@gitlab.com — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required