MEDIUM
Improper Validation of Specified Type of Input in GitLab
Published Aug 30, 2023
5.3
MEDIUMCVSS 3.1
EPSS 1.15%
Description
An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit.
Affected products
-
- Version 0StatusaffectedConstraints<16.2.0
- Version
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Upgrade to versions 16.2 or above.
Weaknesses (1)
References (3)
- https://gitlab.com/gitlab-org/gitlab/-/issues/406817 issue-trackingpermissions-requiredExploit
- https://hackerone.com/reports/1937213 technical-descriptionexploitpermissions-requiredPermissions Required
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/
| Link | Providers | Tags |
|---|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/406817 | issue-trackingpermissions-requiredExploit | |
| https://hackerone.com/reports/1937213 | technical-descriptionexploitpermissions-requiredPermissions Required | |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/ |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitLab
Published Aug 30, 2023
Updated May 26, 2026
Reserved Aug 24, 2023
Link CVE-2023-4522
CISA Vulnrichment
Updated n/a