VULNERABILITY INTELLIGENCE
CVE-2023-3484
CVSS score8 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2023-07-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Description
An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starting from 16.0 before 16.0.7, all versions starting from 16.1 before 16.1.2. An attacker could change the name or path of a public top-level group in certain situations.
Weakness classification
- cve@gitlab.com: CWE-863
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cve@gitlab.com — Broken Link
- cve@gitlab.com — Permissions Required
- nvd@nist.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required