CVE-2023-6477

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-6477
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6477.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-6477
Aliases
Downstream
Published
2024-02-21T23:31:09.811Z
Modified
2025-12-05T04:00:08.601170Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L CVSS Calculator
Summary
Incorrect Privilege Assignment in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. When a user is assigned a custom role with admingroupmember permission, they may be able to make a group, other members or themselves Owners of that group, which may lead to privilege escalation.

Database specific 
{
    "cwe_ids": [
        "CWE-266"
    ],
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6477.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
fc87c9d4cca1536abcf902b4128f5c2004d87162
Fixed
c8f3448a2f0cfb3c812fc4619e0f16bc3feb133b
Database specific 
{
    "versions": [
        {
            "introduced": "16.5"
        },
        {
            "fixed": "16.7.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1e912d57d5a8f1135f4d41e25469069790134d41
Fixed
39213e8fab4a70aa7cf64bb1c75012bb11fd7b15
Database specific 
{
    "versions": [
        {
            "introduced": "16.8"
        },
        {
            "fixed": "16.8.3"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
76326ae8b898b38c8217ad037ed7122be00e62f0
Fixed
cc62007c12dc634c7442a9b1dc94508e50e5dba5
Database specific 
{
    "versions": [
        {
            "introduced": "16.9"
        },
        {
            "fixed": "16.9.1"
        }
    ]
}

Affected versions

v16.*

v16.8.0-ee
v16.8.1-ee
v16.8.2-ee
v16.9.0-ee
v16.9.0-rc44-ee

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6477.json"