vulnerability
FreeBSD: VID-aaea7b7c-4887-11ee-b164-001b217b3468 (CVE-2023-1279): Gitlab -- Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:N/AC:H/Au:S/C:P/I:N/A:N) | Sep 1, 2023 | Sep 1, 2023 | Dec 10, 2025 |
Severity
2
CVSS
(AV:N/AC:H/Au:S/C:P/I:N/A:N)
Published
Sep 1, 2023
Added
Sep 1, 2023
Modified
Dec 10, 2025
Description
Gitlab reports: Privilege escalation of "external user" to internal access through group service account Maintainer can leak sentry token by changing the configured URL (fix bypass) Google Cloud Logging private key showed in plain text in GitLab UI leaking to other group owners Information disclosure via project import endpoint Developer can leak DAST scanners "Site Profile" request headers and auth password Project forking outside current group User is capable of creating Model experiment and updating existing run's status in public project ReDoS in bulk import API Pagination for Branches and Tags can be skipped leading to DoS Internal Open Redirection Due to Improper handling of "../" characters Subgroup Member With Reporter Role Can Edit Group Labels Banned user can delete package registries
Solution
freebsd-upgrade-package-gitlab-ce
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.