GitLab 16.4.0 Enterprise Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:enterprise:*:*:*
part: a version: 16.4.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.305792 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5332 |
vulnerable | 2026-06-08 06:19:43.222792 |
Dependency on Vulnerable Third-Party Component in GitLab
MEDIUM (5.9)
Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.
Published: 2023-12-04T06:30:33.856Z
Updated: 2024-10-03T06:23:16.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5207 |
vulnerable | 2026-06-08 06:19:42.877505 |
Execution with Unnecessary Privileges in GitLab
HIGH (8.2)
A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An authenticated attacker could perform arbitrary pipeline execution under the context of another user.
Published: 2023-09-30T08:30:30.788Z
Updated: 2025-11-20T04:10:28.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5198 |
vulnerable | 2026-06-08 06:19:42.862779 |
Incorrect Authorization in GitLab
MEDIUM (4.3)
An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys.
Published: 2023-09-29T07:01:42.219Z
Updated: 2026-05-17T04:06:13.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5106 |
vulnerable | 2026-06-08 06:19:41.496271 |
Incorrect Authorization in GitLab
HIGH (8.2)
An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.
Published: 2023-10-02T11:49:56.333Z
Updated: 2026-04-07T04:06:43.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4532 |
vulnerable | 2026-06-08 06:16:12.938291 |
Incorrect Authorization in GitLab
MEDIUM (4.3)
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of.
Published: 2023-09-29T06:02:01.299Z
Updated: 2026-04-26T04:06:54.749Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4379 |
vulnerable | 2026-06-08 06:16:12.213884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3979 |
vulnerable | 2026-06-08 06:09:40.956572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3922 |
vulnerable | 2026-06-08 06:09:40.809632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3920 |
vulnerable | 2026-06-08 06:09:40.808841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3917 |
vulnerable | 2026-06-08 06:09:40.808141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3914 |
vulnerable | 2026-06-08 06:09:40.806753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3906 |
vulnerable | 2026-06-08 06:09:40.805051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3413 |
vulnerable | 2026-06-08 06:09:39.509359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3115 |
vulnerable | 2026-06-08 06:09:38.589181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2233 |
vulnerable | 2026-06-08 06:02:41.657499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0989 |
vulnerable | 2026-06-08 05:52:33.583606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.