CVE-2023-5009

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Sep 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-500909.8Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files and r CVE-2023-500926.1APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).CVE-2023-500936.1APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.CVE-2023-500948.8reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/to CVE-2023-500967.5STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to t CVE-2023-50108.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the mar CVE-2023-501005.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.CVE-2023-501015.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.CVE-2023-501025.4JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).CVE-2023-501049.8ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privil CVE-2023-50118.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the mar CVE-2023-501107.5TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.