CVSS 3.1
7.7 highCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:NCVE-2024-0410
High (7.7) in gitlab gitlab. EPSS 0.5% chance of exploitation in the next 30 days.
An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
- CWE
- CWE-841
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gitlab:gitlab