CVE-2023-1708
CRITICAL9.8EPSS 9.0%發布日:2024/3/6修改日:2025/4/3
也稱為:BIT-gitlab-2023-1708
描述
An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine.
受影響套件(1)
- Bitnami/gitlab>= 1.0.0, < 15.8.5, >= 15.9.0, < 15.9.4, >= 15.10.0, < 15.10.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |