vulnerability

FreeBSD: VID-03bf5157-d145-11ee-acee-001b217b3468 (CVE-2023-4895): Gitlab -- Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Feb 22, 2024

Added

Feb 23, 2024

Modified

Jun 15, 2026

Description

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. This vulnerability allows for bypassing the 'group ip restriction' settings to access environment details of projects

Solution

freebsd-upgrade-package-gitlab-ce

References

CVE-2023-4895
https://attackerkb.com/topics/CVE-2023-4895
CWE-862
EUVD-EUVD-2023-54734
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54734

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report