CVE-2023-1708

MEDIUM

GitLab CE/EE <15.8.5-15.10.1 - Code Injection

Title source: llm
STIX 2.1

Description

An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine.

References (3)

Core 3

Scores

CVSS v3 5.7
EPSS 0.0517
EPSS Percentile 90.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-94 CWE-77
Status published
Products (2)
gitlab/gitlab 15.10.0 (2 CPE variants)
gitlab/gitlab 1.0.0 - 15.8.5 (2 CPE variants)
Published Apr 05, 2023
Tracked Since Feb 18, 2026