Beveiligingsadvies

CVE-2023-5356

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-12 13:56:51

Laatst bijgewerkt 2026-04-28 04:05:15

Toegewezen door GitLab

CVSS-score 7.3

Status PUBLISHED

Beschrijving

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.

← Alle CVE's bekijken Bekijk op cve.org ↗