description: In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
problem types: Access of resource using incompatible type ('type confusion') in GitLab
affected:
{
vendor: GitLab
product: GitLab
versions:
version: >=1.0, <12.9.8, status: affected
version: >=15.5, <15.5.5, status: affected
version: >=15.6, <15.6.1, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
]