NetSight
low3.1

CVE-2023-2233

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 be…

Impact

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

Affected products

VendorProductAffected versions
GitlabGitlab
from 11.8 before 16.2.8
from 16.3.0 before 16.3.5
Version 16.4.0

Weakness classification

References