GitLab 16.4.0 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:community:*:*:*
part: a version: 16.4.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.305790 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5207 |
vulnerable | 2026-06-08 06:19:42.877373 |
Execution with Unnecessary Privileges in GitLab
HIGH (8.2)
A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.
Published: 2023-09-30T08:30:30.788Z
Updated: 2025-11-20T04:10:28.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5198 |
vulnerable | 2026-06-08 06:19:42.862579 |
Incorrect Authorization in GitLab
MEDIUM (4.3)
An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys.
Published: 2023-09-29T07:01:42.219Z
Updated: 2026-05-17T04:06:13.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4532 |
vulnerable | 2026-06-08 06:16:12.938228 |
Incorrect Authorization in GitLab
MEDIUM (4.3)
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of.
Published: 2023-09-29T06:02:01.299Z
Updated: 2026-04-26T04:06:54.749Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3979 |
vulnerable | 2026-06-08 06:09:40.956406 |
Incorrect Authorization in GitLab
LOW (3.1)
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with you on your branch get permission to write to the merge request’s source branch.
Published: 2023-09-29T06:02:06.310Z
Updated: 2026-05-08T04:06:39.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3922 |
vulnerable | 2026-06-08 06:09:40.809537 |
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
LOW (3)
An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to hijack some links and buttons on the GitLab UI to a malicious page.
Published: 2023-09-29T07:30:50.402Z
Updated: 2026-04-25T04:05:19.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3920 |
vulnerable | 2026-06-08 06:09:40.808822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3917 |
vulnerable | 2026-06-08 06:09:40.808119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3906 |
vulnerable | 2026-06-08 06:09:40.805027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3413 |
vulnerable | 2026-06-08 06:09:39.509339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3115 |
vulnerable | 2026-06-08 06:09:38.588418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2233 |
vulnerable | 2026-06-08 06:02:41.656779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0989 |
vulnerable | 2026-06-08 05:52:33.582693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.