Unrated severityNVD Advisory· Published Nov 9, 2023· Updated Apr 21, 2026
Incorrect Authorization in GitLab
CVE-2023-4379
Description
An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.
Affected products
3- Range: >=15.3, <16.2.8; >=16.3, <16.3.5; >=16.4, <16.4.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- gitlab.com/gitlab-org/gitlab/-/issues/415496mitreissue-trackingpermissions-required
News mentions
1- GitLab Security Release: 16.4.1, 16.3.5, and 16.2.8GitLab Security Releases · Sep 28, 2023