Source |
CVE Liste |
Identifiant |
8317055 |
Date de publication |
2023-03-09 20:15:09 (vue: 2023-03-09 22:07:09) |
Titre |
CVE-2023-1084 |
Texte |
An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request. |
Notes |
|
Envoyé |
Oui |
Condensat |
1084 2023 access affecting all been before ce/ee crafted create cve discovered from gitlab has issue level maintainer malicious may owner privileges project request starting token using versions |
Tags |
|
Stories |
|
Move |
|