Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:16.4.3:*:*:*:enterprise:*:*:*

part: a version: 16.4.3 update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/gitlab-org/gitlab purl2cpe 2026-06-01 10:14:46.305800

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6564 vulnerable 2026-06-03 14:53:52.152618 Incorrect Authorization in GitLab
MEDIUM (6.5)
An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.
Published: 2024-02-08T11:30:52.438Z
Updated: 2024-10-03T06:23:16.888Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.