GitLab security advisories, September 2023

Every GitLab security advisory published in September 2023, from GitLab ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 8
Critical: 0
High: 2
In CISA KEV: 0
CVEs: 9

GitLab advisories published in September 2023

Sep 30, 2023
High [CVE-2023-5207] Execution with Unnecessary Privileges in GitLab
High8.2
Sep 29, 2023
Medium [CVE-2023-3920] Incorrect Authorization in GitLab
Medium4.3
Sep 29, 2023
Medium [CVE-2023-3914] Incorrect User Management in GitLab
Medium5.4
Sep 29, 2023
Low [CVE-2023-3906] Improper Validation of Specified Type of Input in GitLab
Low3.5
Sep 29, 2023
Low [CVE-2023-3979] Incorrect Authorization in GitLab
Low3.1
Sep 19, 2023
High [CVE-2023-3932 +1] Incorrect Authorization in GitLab
High8.2
Sep 11, 2023
Medium [CVE-2023-4630] Missing Authorization in GitLab
Medium5.0
Sep 1, 2023
Medium [CVE-2023-4018] Direct Request ('Forced Browsing') in GitLab
Medium4.3

Get an email when GitLab publishes the next one.

See GitLab's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about GitLab

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.