CVE-2023-3205

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

VendorProductVersions
GitLabGitLab>= 15.11, < 16.1.5; >= 16.2, < 16.2.5; >= 16.3, < 16.3.1

References

Timeline

Published
Sep 1, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-320507.0Windows Installer Elevation of Privilege VulnerabilityCVE-2023-320517.8Raw Image Extension Remote Code Execution VulnerabilityCVE-2023-320525.4Microsoft Power Apps (online) Spoofing VulnerabilityCVE-2023-320537.8Windows Installer Elevation of Privilege VulnerabilityCVE-2023-320547.3Volume Shadow Copy Elevation of Privilege VulnerabilityCVE-2023-320556.7Active Template Library Elevation of Privilege VulnerabilityCVE-2023-320569.8Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityCVE-2023-320579.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-320587.5Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loopCVE-2023-320597.5Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments CVE-2023-32067.5A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of theCVE-2023-320606.5DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.35 branch and prior t
CVE-2023-3205: Medium severity, CVSS 6.5 | Vulnix