Medium severity6.5NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026
CVE-2023-0485
CVE-2023-0485
Description
An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible that a project member demoted to a user role to read project updates by doing a diff with a pre-existing fork.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4>=13,11, <15.8.5+ 2 more
- (no CPE)range: >=13,11, <15.8.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=13.11,<15.8.5
- (no CPE)range: 13.11 <= v < 15.8.5, 15.9 <= v < 15.9.4, 15.10 <= v < 15.10.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0485.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/389191nvdBroken Link
- hackerone.com/reports/1837937nvdPermissions Required
News mentions
0No linked articles in our index yet.