Improper access control in GitLab Enterprise Edition - CVE-2023-6564
Published: December 14, 2023
Vulnerability identifier: #VU84413
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-6564
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to in projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or merge to protected branches.
Affected software
GitLab Enterprise Edition
How to mitigate CVE-2023-6564
Install updates from vendor's website.
GitLab Enterprise Edition - addressed in versions 16.4.4, 16.5.4, 16.6.2