VYPR
← All advisories
High severity7.7NVD Advisory· Published Feb 22, 2024· Updated Jun 17, 2026

CVE-2024-0410

CVE-2024-0410

Description

An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=15.1.0,<16.7.6
    • cpe:2.3:a:gitlab:gitlab:16.9.0:*:*:*:*:*:*:*
    • (no CPE)range: <16.7.6, <16.8.3, <16.9.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.1.0, < 16.7.6

Patches

Vulnerability mechanics

References

2

News mentions

1