CVE-2023-4895

Summary

CVE-2023-4895 is a vulnerability affecting GitLab Enterprise Edition (EE). This issue, which impacts versions 12.0 to 16.7.6, 16.8 before 16.8.3, and 16.9 before 16.9.1, allows bypassing the 'group IP restriction' settings. As a result, unauthorized users can access environment details of projects, potentially leading to data leaks or other security breaches. It is essential for GitLab EE users to update to the latest patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.