01642 06 11 11 Arrange Call

Improper Permission Validation Allows Unauthorized Editing of Label Descriptions in GitLab

CVE-2023-0120 · LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CVE-2023-0120

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user.

Learn more about our User Device Pen Test.