An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. It was possible for auditor users to fork and submit merge requests to private projects they're not a member of.
Metrics
Affected Vendors & Products
References
History
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2023-12-15T15:31:04.966Z
Updated: 2024-09-18T04:05:15.183Z
Reserved: 2023-07-04T21:18:11.362Z
Link: CVE-2023-3511
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-12-15T16:15:43.053
Modified: 2023-12-19T21:14:37.470
Link: CVE-2023-3511
Redhat
No data.