CVE-2023-3915

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-3915
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3915.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-3915
Aliases
Published
2023-09-01T10:01:16.853Z
Modified
2025-12-05T00:59:00.085499Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Incorrect Execution-Assigned Permissions in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. If an external user is given an owner role on any group, that external user may escalate their privileges on the instance by creating a service account in that group. This service account is not classified as external and may be used to access internal projects.

Database specific 
{
    "cwe_ids": [
        "CWE-279"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3915.json",
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
4961ad113f3afe23965ac12285eaab31315ab0c6
Fixed
075efefa5f88454cb1afda1f0270e91edcb55ed3
Database specific 
{
    "versions": [
        {
            "introduced": "16.1"
        },
        {
            "fixed": "16.1.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3adc0fe6e7c163bedd7faa5f0c4d1e5fbb6bf3c5
Fixed
16c20745a286eb674f48366d84abe5f4dd5fb2c6
Database specific 
{
    "versions": [
        {
            "introduced": "16.2"
        },
        {
            "fixed": "16.2.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3dfd4e0bcc7eae4330e7fed87ec74bee9a8bdf2d
Fixed
67bb799df143b3adf43688cfa074e10c8a1d9a0c
Database specific 
{
    "versions": [
        {
            "introduced": "16.3"
        },
        {
            "fixed": "16.3.1"
        }
    ]
}

Affected versions

v16.*

v16.1.0-ee
v16.1.1-ee
v16.1.2-ee
v16.1.3-ee
v16.1.4-ee
v16.2.0-ee
v16.2.1-ee
v16.2.2-ee
v16.2.3-ee
v16.2.4-ee
v16.3.0-ee

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3915.json"