CVE-2023-6840

MEDIUM Year: 2023
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-862
View all →

Vulnerability Description

An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows a maintainer to change the name of a protected branch that bypasses the security policy added to block MR.

Related Vulnerabilities

CVE-2017-6598

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security A...

CWE-8622017

CVE-2017-8083

MEDIUM
CVSS:6.7(Medium)

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a f...

CWE-8622017

CVE-2020-15780

MEDIUM
CVSS:6.7(Medium)

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot ...

CWE-8622020

CVE-2020-26231

MEDIUM
CVSS:6.7(Medium)

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 (fixed in 1.0.469 and 1.1.0) was discovered that has the same impact as CVE-2020...

CWE-8622020

CVE-2020-27777

MEDIUM
CVSS:6.7(Medium)

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (...

CWE-8622020

CVE-2020-9209

MEDIUM
CVSS:6.7(Medium)

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vu...

CWE-8622020