Description (CNA)
An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the `Guest` role can change `Custom dashboard projects` settings contrary to permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected 16.9 before 16.9.1; affected 16.8 before 16.8.3; affected 16.4 before 16.7.6 |
CWE
CWE-425
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.