Incorrect Authorization Affecting gitlab package, versions <16.6.5-3
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIANUNSTABLE-GITLAB-6153914
- published 12 Jan 2024
- disclosed 12 Jan 2024
Introduced: 12 Jan 2024
CVE-2023-5356 Open this link in a new tabHow to fix?
Upgrade Debian:unstable gitlab to version 16.6.5-3 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream gitlab package and not the gitlab package as distributed by Debian.
See How to fix? for Debian:unstable relevant fixed versions and status.
Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.