CVE catalog

CVE-2023-1279

UBUNTU-CVE-2023-1279

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugitlab16.048.4.3+dfsg-9vulnerable
Ubuntugitlab16.048.4.3+dfsg-12vulnerable
Ubuntugitlab16.048.5.8+dfsg-5vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References