CVE-2023-6477 - Incorrect Privilege Assignment in GitLab

Back Back to CVE browser

MEDIUM

Incorrect Privilege Assignment in GitLab

Published Feb 21, 2024

6.7

MEDIUM

CVSS 3.1

EPSS 0.53%

Description

An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. When a user is assigned a custom role with admin_group_member permission, they may be able to make a group, other members or themselves Owners of that group, which may lead to privilege escalation.

Affected products

Vendor GitLab Product GitLab Default
unaffected
- Version
  16.5
  Status
  affected
  Constraints
  <16.7.6
- Version
  16.8
  Status
  affected
  Constraints
  <16.8.3
- Version
  16.9
  Status
  affected
  Constraints
  <16.9.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

unaffected

Version	Status	Constraints
16.5	affected	<16.7.6
16.8	affected	<16.8.3
16.9	affected	<16.9.1

Remediation

Vendor solution

Upgrade to versions 16.9.1, 16.8.3, 16.7.6 or above.

Weaknesses (1)

CWE-266

Incorrect Privilege Assignment

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58710
Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/433463
issue-trackingpermissions-requiredPermissions Required
https://hackerone.com/reports/2270898
technical-descriptionexploitpermissions-requiredPermissions Required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58710		Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/433463		issue-trackingpermissions-requiredPermissions Required
https://hackerone.com/reports/2270898		technical-descriptionexploitpermissions-requiredPermissions Required