CVE-2023-0223

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-0223
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0223.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-0223
Aliases
Downstream
Published
2023-03-09T00:00:00Z
Modified
2025-11-28T02:34:15.078455Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Non-project members could retrieve release descriptions via the API, even if the release visibility is restricted to project members only in the project settings.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0223.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
af0fced4dd2e767d361f2bdc0732be15ad2c1026
Fixed
d7f0ac7432bb9ab3f10b7025dc5f9d5b3fe8c76e
Database specific 
{
    "versions": [
        {
            "introduced": "15.5"
        },
        {
            "fixed": "15.7.8"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1d89c23c9f904e710e6e4ebdbc5bdd39cbb83717
Fixed
089019df22f87ccb9fff3ff3fe710f70f77084d3
Database specific 
{
    "versions": [
        {
            "introduced": "15.8"
        },
        {
            "fixed": "15.8.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b107c0bae0871a67dee31ad8e52550d32c4afb66
Fixed
d80458522dd70245b7e0b9f1297f1dd227ebc10a
Database specific 
{
    "versions": [
        {
            "introduced": "15.9"
        },
        {
            "fixed": "15.9.2"
        }
    ]
}

Affected versions

v15.*

v15.8.0-ee
v15.8.1-ee
v15.8.2-ee
v15.8.3-ee
v15.9.0-ee
v15.9.1-ee