Skip to content
OpenAdvisories
High · 8.1 CVE-2023-4379 EUVD-2023-54243GHSA-qrp8-hgrf-wv83

Incorrect Authorization in GitLab

Published Nov 9, 2023 · Updated Nov 2, 2026 · Assigned by GitLab

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

Affected products

VendorProductAffectedFixed
GitLab GitLab 15.3 – < 16.2.8, 16.3 – < 16.3.5, 16.4 – < 16.4.1 16.2.8

Advisories 1

References