Description (CNA)
An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected 14.0 before 16.6.6; affected 16.7 before 16.7.4; affected 16.8 before 16.8.1 |
CWE
CWE-425
References
- https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/
- https://gitlab.com/gitlab-org/gitlab/-/issues/430726
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.