Unrated severityNVD Advisory· Published Nov 6, 2023· Updated Nov 20, 2025
Missing Authorization in GitLab
CVE-2023-4700
Description
An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.
Affected products
3- Range: >=14.7 <16.3.6 || >=16.4 <16.4.2 || >=16.5 <16.5.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- hackerone.com/reports/2129826mitretechnical-descriptionexploitpermissions-required
- gitlab.com/gitlab-org/gitlab/-/issues/421937mitreissue-trackingpermissions-required
News mentions
1- GitLab Security Release: 16.5.1, 16.4.2, 16.3.6GitLab Security Releases · Oct 31, 2023