Lucene search

PRIOn knowledge basePRION:CVE-2023-4379

HistoryNov 09, 2023 - 9:15 p.m.

Code injection

2023-11-0921:15:00

PRIOn knowledge base

www.prio-n.com

gitlab

code injection

vulnerability

versions 15.3-16.4.1

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.0%

JSON

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

CPENameOperatorVersion
gitlabge16.3.0
gitlablt16.3.5
gitlabeq16.4.0
gitlabge15.3.0
gitlablt16.2.8

Name	Operator	Version
gitlab	ge	16.3.0
gitlab	lt	16.3.5
gitlab	eq	16.4.0
gitlab	ge	15.3.0
gitlab	lt	16.2.8

References

gitlab.com/gitlab-org/gitlab/-/issues/415496