CVE-2023-1555

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespace-level banned user can access the API.

Scoring

Severity

LOW

CVSS base score

2.7

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS probability

0.06%

CWE

CWE-262

Published

2023-09-01

Last modified

2026-03-13

Affected products

• GitLab GitLab
• GitLab GitLab
• GitLab GitLab

Weakness type

• CWE-262

Related vulnerabilities

• CVE-2026-50101 — Naxclow IoT Platform Not using password aging
• CVE-2025-60010 — Junos OS and Junos OS Evolved: Device allows login for user with expired password
• CVE-2025-58435 — Open OnDemand didn't rotate password for VNC batch_connect
• CVE-2023-2022 — Missing Authorization in GitLab
• CVE-2022-22767 — BD Pyxis™ Products – Default Credentials

Markdown version · Browse all CVEs