An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.
References
Link | Resource |
---|---|
https://gitlab.com/gitlab-org/gitlab/-/issues/424398 | Broken Link |
https://hackerone.com/reports/2115574 | Permissions Required |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitLab
Published: 2024-01-12T13:56:56.701Z
Updated: 2024-01-12T13:56:56.701Z
Reserved: 2023-09-06T19:01:03.223Z
Link: CVE-2023-4812
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-12T14:15:48.510
Modified: 2024-01-18T21:18:27.850
Link: CVE-2023-4812
JSON object: View
Redhat Information
No data.