An issue has been discovered in GitLab affecting all... · CVE-2023-3979 · GitHub Advisory Database · GitHub

An issue has been discovered in GitLab affecting all...

Moderate severity Unreviewed Published Sep 29, 2023 to the GitHub Advisory Database • Updated Oct 3, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with you on your branch get permission to write to the merge request’s source branch.

References

Published by the National Vulnerability Database

Sep 29, 2023

Published to the GitHub Advisory Database Sep 29, 2023

Last updated Oct 3, 2024

Weaknesses

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Learn more on MITRE.

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. Learn more on MITRE.