CVE-2023-0450
Low
Published: 05 April 2023
Published
05 April 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
3.7
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS Score
0.0150
81.6th percentile
Risk Priority
8
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-0450 is a low-severity an unspecified weakness vulnerability in Gitlab Gitlab. Its CVSS base score is 3.7 (Low).
Operationally, ranked in the top 18.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-12504
Vulnerability details
An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used…
more
to social engineer users.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
gitlab
gitlab
15.10.0 · 8.1.0 — 15.8.5 · 8.1.0 — 15.8.5 · 15.9.0 — 15.9.4
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.