CVE-2023-2233

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-2233
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2233.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-2233
Aliases
Downstream
Published
2023-09-29T06:30:51.179Z
Modified
2026-04-10T04:55:21.145542Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Missing Authorization in GitLab
Details

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2233.json",
    "cwe_ids": [
        "CWE-862"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
002a28279f5b3fd229f929bb1f40eb7b5fc87ee9
Fixed
7fc27fe692abccaed7e2e0ebfea2aadf5140593f
Database specific 
{
    "versions": [
        {
            "introduced": "11.8"
        },
        {
            "fixed": "16.2.8"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3dfd4e0bcc7eae4330e7fed87ec74bee9a8bdf2d
Fixed
40d6bde8c59f78957b08b3a7cd9622a97b7af981
Database specific 
{
    "versions": [
        {
            "introduced": "16.3"
        },
        {
            "fixed": "16.3.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
e4c1c182610739c1b1d10a8eacbea1f5aa837ad6
Fixed
229bc5f59850b16213b035138ad76f65b6724864
Database specific 
{
    "versions": [
        {
            "introduced": "16.4"
        },
        {
            "fixed": "16.4.1"
        }
    ]
}

Affected versions

v16.*
v16.3.0-ee
v16.3.2-ee
v16.3.3-ee
v16.4.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2233.json"