CVE-2023-0155: GitLab

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowing user controlled markdown

Affected products

• GitLab GitLab: before 15.8.5 (fixed in 15.8.5); from 15.9, before 15.9.5 (fixed in 15.9.5); from 15.10, before 15.10.1 (fixed in 15.10.1)

Published 2023-05-03. Last modified 2026-06-17.