CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@gitlab.com

Published

2024-10-01

Last modified

2024-10-01

Weaknesses

CWE-213

Affected products

• Gitlab (Gitlab)

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/416482
• https://gitlab.com/gitlab-org/gitlab/-/issues/417284
• https://hackerone.com/reports/2033561
• https://hackerone.com/reports/2041385