CVE-2023-0450

LOW

GitLab <15.8.5, 15.9-15.9.4, 15.10-15.10.1 - CSRF

Title source: llm
STIX 2.1

Description

An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used to social engineer users.

References (3)

Core 3

Scores

CVSS v3 3.7
EPSS 0.0155
EPSS Percentile 81.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

Status published
Products (2)
gitlab/gitlab 15.10.0 (2 CPE variants)
gitlab/gitlab 8.1.0 - 15.8.5 (2 CPE variants)
Published Apr 05, 2023
Tracked Since Feb 18, 2026