An issue has been discovered in GitLab affecting all... · CVE-2023-1279 · GitHub Advisory Database · GitHub

An issue has been discovered in GitLab affecting all...

Moderate severity Unreviewed Published Sep 1, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.

References

Published by the National Vulnerability Database

Sep 1, 2023

Published to the GitHub Advisory Database Sep 1, 2023

Last updated Apr 4, 2024

Weaknesses

CWE-138

Improper Neutralization of Special Elements

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as control elements or syntactic markers when they are sent to a downstream component. Learn more on MITRE.

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. Learn more on MITRE.