{"uuid": "dfaedbf5-ed5f-47ac-a460-1a1c91a5aaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5009", "type": "seen", "source": "https://t.me/KomunitiSiber/816", "content": "GitLab Releases Urgent Security Patches for Critical Vulnerability\nhttps://thehackernews.com/2023/09/gitlab-releases-urgent-security-patches.html\n\nGitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.\nThe issue, tracked as\u00a0CVE-2023-5009\u00a0(CVSS score: 9.6), impacts all versions of GitLab Enterprise Edition (EE) starting from 13.12 and prior to 16.2.7 as well as from 16.3 and before 16.3.4.\n\"It was possible for an attacker to\u00a0run pipelines\u00a0as an arbitrary user via scheduled", "creation_timestamp": "2023-09-20T10:49:32.000000Z"}