CVE-2023-5106 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-5106 PUBLISHED

An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.

EPSS 0.04% · 12.4th percentile

Risk Scores

EPSS Score

0.04%

12.4th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	13.12.0, 16.3.0, 16.4.0
Bitnami	gitlab	13.12.0, 16.3.0, 16.4.0

Timeline

Jan 21, 1970 Security Advisory
Sep 28, 2023 CVE Published
Oct 3, 2023 EPSS Score
Nov 3, 2023 EPSS Score
Dec 4, 2023 EPSS Score
Jan 4, 2024 EPSS Score
Feb 5, 2024 EPSS Score
Mar 7, 2024 EPSS Score
Apr 7, 2024 EPSS Score
May 8, 2024 EPSS Score
Jun 8, 2024 EPSS Score
Jul 9, 2024 EPSS Score

References

Open in Interactive Console →