Vulnerabilities CVE-2023-3979

CVE-2023-3979

Low

Open

TLP:CLEAR

Incorrect Authorization in GitLab

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with you on your branch get permission to write to the merge request’s source branch.

Details

CVSS Score: 3.1
EPSS Score ⓘ: 0.40%

33.1th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Confidence: 90%
Published: Sep 29, 2023
Last Modified: Aug 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.