CVE-2023-2589

Summary

CVE-2023-2589 is a vulnerability affecting GitLab Enterprise Edition (EE) versions 12.0 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2. This issue allows an unauthorized user from a disallowed IP address to clone a repository from a public project, bypassing the IP restrictions set by the top-level group. This could potentially lead to sensitive data being exposed. Attackers can take advantage of this vulnerability to gain unauthorized access to the repository and its contents. GitLab strongly advises users to upgrade to the latest patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.