CVE-2023-3441
published 2024-10-01CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security…
PriorityP342critical9.1CVSS 3.1
AVNACLPRHUINSCCHIHAH
EPSS
0.55%
41.7th percentile
An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 16.4.4+ds2-1 (sid) | gitlab 16.4.4+ds2-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 8.0 < 16.4 | 16.4 |
| gitlab | gitlab | >= 8.0.0 < 16.4.0 | 16.4.0 |
| gitlab | gitlab_ee | — | — |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
osv9.1CRITICAL
vendor_debian6.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about securit
vendor_gitlab·2024-10-01·CVSS 6.6
CVE-2023-3441 [MEDIUM] CWE-213 CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about securit
CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.
Debian
CVE-2023-3441: gitlab - An issue has been discovered in GitLab EE/CE affecting all versions starting fro...
vendor_debian·2023·CVSS 6.6
CVE-2023-3441 [MEDIUM] CVE-2023-3441: gitlab - An issue has been discovered in GitLab EE/CE affecting all versions starting fro...
An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.
Scope: local
sid: resolved (fixed in 16.4.4+ds2-1)
OSV
CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8
osv·2024-10-01·CVSS 9.1
CVE-2023-3441 [CRITICAL] CVE-2023-3441: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8
An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.
GHSA
GHSA-j2mx-xc3v-gw3q: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8
ghsa_unreviewed·2024-10-01
CVE-2023-3441 [MEDIUM] CWE-213 GHSA-j2mx-xc3v-gw3q: An issue has been discovered in GitLab EE/CE affecting all versions starting from 8
An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-01
Published