VulnerabilityModified
CVE-2023-1965
Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins.
MEDIUM 6.5EPSS 0.43%
Does this matter?
Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.
Description
An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.43% probability · 36th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- gitlab/gitlab
- Source
- cve@gitlab.com
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1965.jsonThird Party Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/406235Broken Link
- https://hackerone.com/reports/1923672Permissions Required
- https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1965.jsonThird Party Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/406235Broken Link
- https://hackerone.com/reports/1923672Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.