CVE-2023-1708 Information

Description

An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard allowing unexpected commands to be executed on victim machine.

Reference

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json https://hackerone.com/reports/1805604 https://gitlab.com/gitlab-org/gitlab/-/issues/387185

Share on: