CVE-2023-3922

LOW

Gitlab < 16.2.8 - Open Redirect

Title source: rule

Description

An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to hijack some links and buttons on the GitLab UI to a malicious page.

References (2)

Scores

CVSS v3 3.0
EPSS 0.0007
EPSS Percentile 21.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L

Classification

CWE
CWE-601
Status published

Affected Products (4)

gitlab/gitlab < 16.2.8
gitlab/gitlab < 16.2.8
gitlab/gitlab
gitlab/gitlab

Timeline

Published Sep 29, 2023
Tracked Since Feb 18, 2026