CVE-2023-3915

Summary

CVE-2023-3915 is a vulnerability affecting GitLab Enterprise Edition (EE) versions prior to 16.1.5, 16.2.5, and 16.3.1. A security flaw has been identified where an external user, if granted the owner role on any group, can escalate their privileges by creating a service account within that group. This new account will bypass external access restrictions and allow the malicious user to access internal projects on the GitLab instance.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.