HIGH

CVE-2023-2182

Gitlab GitLab 2023-05-03 CVSS v3.1

CVSS

8.8

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions when OpenID Connect is enabled on an instance, it may allow users who are marked as 'external' to become 'regular' users thus leading to privilege escalation for those users.

EPSS Score

1.04%

Probability of exploitation in next 30 days

62.5th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2182.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/403012 Exploit, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE