CVE-2023-4008

Summary

CVE-2023-4008 is a vulnerability affecting GitLab CE/EE versions 15.9 before 16.0.8, 16.1 before 16.1.3, and 16.2 before 16.2.2. This issue allows an attacker to takeover GitLab Pages with unique domain URLs if they know the random string added during the page creation process. This could potentially lead to unauthorized access and data breaches. Users are encouraged to update their GitLab installations to the latest patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.