Dashboard / CVE-2023-4379

CVE-2023-4379

HIGH
MEDIUM Priority: 0.05 BB Relevance: 51/100
Published: 2023-11-09 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: Required
S: Changed
C: High
I: High
A: None

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
GitLab GitLab 15.3 < 16.2.8
GitLab GitLab 16.3 < 16.3.5
GitLab GitLab 16.4 < 16.4.1

References & Advisories (1)

Bug Bounty Relevance

51 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

8.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

EPSS — Exploitation Probability

0.60%
Raw Score 0.006000
Percentile 48.7%
Date 2026-11-01

Intelligence Sources

mitre ref →

External Links