Medium · 6.6 CVE-2023-3441 EUVD-2023-44105GHSA-j2mx-xc3v-gw3q

Exposure of Sensitive Information Due to Incompatible Policies in GitLab

Published Oct 1, 2024 · Updated Oct 1, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Package: gitlab Category: Web / CMS Ecosystem: Ubuntu

Description

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.

Affected products

Vendor	Product	Affected	Fixed
GitLab	GitLab	8.0 – < 16.4	16.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	gitlab	No fix yet	—

References

GitLab Issue #416482 issue-tracking permissions-required
HackerOne Bug Bounty Report #2033561 technical-description exploit permissions-required
GitLab Issue #417284 issue-tracking permissions-required
HackerOne Bug Bounty Report #2041385 technical-description exploit permissions-required