Description (CNA)
An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected 15.1 before 16.7.6; affected 16.8 before 16.8.3; affected 16.9 before 16.9.1 |
CWE
CWE-841
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.