CVE-2023-3401
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, and all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code.
Risk Assessment
The organization may be exposed to the introduction of malicious code into its repositories, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update GitLab to version 16.0.8 or newer, 16.1.3 or newer, and 16.2.2 or newer to mitigate this vulnerability.
Original NVD description (English source)
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code.