VDB
CVE-2023-4379
CVE-2023-4379
PUBLISHED
CVSS 7.5 HIGH
An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.
EPSS 0.60% · 46.8th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.60%
46.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 15.3.0, 16.3.0, 16.4.0 |
| Bitnami | gitlab | 15.3.0, 16.3.0, 16.4.0 |
Timeline
- Sep 28, 2023 CVE Published
- Nov 10, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 11, 2024 EPSS Score
- Feb 11, 2024 EPSS Score
- Mar 13, 2024 EPSS Score
- Apr 13, 2024 EPSS Score
- May 14, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
- Jul 14, 2024 EPSS Score
- Aug 14, 2024 EPSS Score
- Sep 14, 2024 EPSS Score