Vulnerability · Published Sep 19, 2023 · Assigned by GitLab

CVE-2023-5009Incorrect Authorization in GitLab

High 8.2

In plain English

A high-severity incorrect authorization in GitLab from GitLab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.7% (higher than 96% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)9.7%top 4.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.

Affected products (as reported)

Vendor	Product	Versions
GitLab	GitLab	13.12 – before 16.2.716.3 – before 16.3.4

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

References

GitLab Issue #425304 issue-tracking, permissions-required
HackerOne Bug Bounty Report #2147126 technical-description, exploit, permissions-required