← CVE Intelligence

CVE-2023-2022

Missing Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on protected branches even if they don't have access to merge

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 0 before 16.0.8; affected 16.1.0 before 16.1.3; affected 16.2.0 before 16.2.2

CWE

CWE-262

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.