CVE-2023-3441

Exposure of Sensitive Information Due to Incompatible Policies in GitLab

Summary

Original description

The description as published by the source.

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"16.4.0"}]}]

References

report gitlab.com
report gitlab.com
web hackerone.com
web hackerone.com
web nvd.nist.gov