CVE-2023-4018
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation, it was possible to create model experiments in public projects.
Risk Assessment
The organization may be exposed to unauthorized experiments in public projects, potentially leading to data disclosure or project integrity violations.
Recommendation
It is recommended to update GitLab to version 16.2.5 or 16.3.1 to mitigate this vulnerability.
Original NVD description (English source)
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to create model experiments in public projects.