CVE-2023-5207

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

Vendor	Product	Versions
GitLab	GitLab	>= 16.4, < 16.4.1; >= 16.3, < 16.3.5; >= 16.0.0, < 16.2.8

References

https://gitlab.com/gitlab-org/gitlab/-/issues/425604Broken Link
https://gitlab.com/gitlab-org/gitlab/-/issues/425857Broken Link
https://hackerone.com/reports/2174141Permissions Required
https://gitlab.com/gitlab-org/gitlab/-/issues/425604Broken Link
https://gitlab.com/gitlab-org/gitlab/-/issues/425857Broken Link
https://hackerone.com/reports/2174141Permissions Required

Timeline

Published: Sep 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-520708.4JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this CVE-2023-520728.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.CVE-2023-520738.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.CVE-2023-520748.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.CVE-2023-520757.5ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bc CVE-2023-520767.8Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vu CVE-2023-520779.8Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps usin CVE-2023-520796.5msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users ca CVE-2023-520807.7IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attack CVE-2023-520815.3ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function `lookupPreprocess()` is meant to apply some CVE-2023-520829.8Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when using mysql/mariadb. T CVE-2023-520834.8Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files to