How severe is CVE-2023-4658?

This vulnerability has a severity rating of LOW with a CVSS score of 3.1 out of 10.

What type of vulnerability is CVE-2023-4658?

This is classified as CWE-863, which is a common weakness in software security.

CVE-2023-4658 - LOW Severity | CVSS 3.1

Vulnerability Description

An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the `Allowed to merge` permission as a guest user, when granted the permission through a group.

Related Vulnerabilities

CVE-2020-5418

LOW

CVSS:3.1(Low)

Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (...

CWE-8632020

CVE-2023-3584

LOW

CVSS:3.1(Low)

Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing an authenticated attacker with knowledge of a Team Override S...

CWE-8632023

CVE-2024-10043

LOW

CVSS:3.1(Low)

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that all...

CWE-8632024

CVE-2024-27288

LOW

CVSS:3.1(Low)

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability h...

CWE-8632024

CVE-2024-47780

LOW

CVSS:3.1(Low)

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/grou...

CWE-8632024

CVE-2024-49208

LOW

CVSS:3.1(Low)

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit th...

CWE-8632024