Detections
Analytics
CVE-2023-4638
medium
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.3 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation, it was possible to fork a project outside of current group by an unauthorized user.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01