CVE-2023-6564

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Feb 8, 2024
Updated: Mar 4, 2024
CWE ID 285

Summary

CVE-2023-6564 is a vulnerability affecting GitLab EE Premium and Ultimate versions 16.4.3, 16.5.3, and 16.6.1. In these versions, a problem has been identified where subgroup members with the Developer role may gain unintended push or merge permissions on protected branches. This issue arises due to a misconfiguration in projects utilizing subgroups for access control. This vulnerability could potentially lead to unauthorized changes being made to protected branches. Organizations using the mentioned GitLab versions are advised to apply the necessary patches to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-6564 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions

Book your demo

Sign in

Back to Vulnerability Database