The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Gitlab reports: XSS and ReDoS in Markdown via Banzai pipeline of Jira Members with admin_group_member     custom permission can add members with higher role Release Description visible in public projects despite     release set as project members only through atom response Manipulate the repository content in the UI     (CVE-2023-3401 bypass) External user can abuse policy bot to gain access to internal projects Client-side     DOS via Mermaid Flowchart Developers can update pipeline schedules to use protected branches even if they     don't have permission to merge Users can install Composer packages from public projects even when Package     registry is turned off Unauthorized member can gain Allowed to push and merge access and affect integrity     of protected branches Guest users can react (emojis) on confidential work items which they cant see in a     project (CVE-2023-6396)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of GitLab installed on the remote host is affected by a vulnerability, as follows:

  - Gitlab reports: XSS and ReDoS in Markdown via Banzai pipeline of Jira Members with admin_group_member     custom permission can add members with higher role Release Description visible in public projects despite     release set as project members only through atom response Manipulate the repository content in the UI     (CVE-2023-3401 bypass) External user can abuse policy bot to gain access to internal projects Client-side     DOS via Mermaid Flowchart Developers can update pipeline schedules to use protected branches even if they     don't have permission to merge Users can install Composer packages from public projects even when Package     registry is turned off Unauthorized member can gain Allowed to push and merge access and affect integrity     of protected branches Guest users can react (emojis) on confidential work items which they cant see in a     project (CVE-2023-6396)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3b14b2b4-9014-11ee-98b3-001b217b3468 advisory.

  - An issue has been discovered in GitLab EE affecting all versions starting from X.Y before 16.X, all     versions starting from 16.X before 16.X. It was possible for an attacker to abuse the Allowed to merge     permission as a guest user, when granted the permission through a group. (CVE-2023-4658)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
262284	Linux Distros Unpatched Vulnerability : CVE-2023-6396	Nessus	Misc.	Local	critical
186659	GitLab 16.5 < 16.5.3 / 16.6 < 16.6.1 (CVE-2023-6396)	Nessus	CGI abuses	Combined	high
186498	FreeBSD : Gitlab -- Vulnerabilities (3b14b2b4-9014-11ee-98b3-001b217b3468)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2023-6396

high

Tenable Plugins

critical

high

high