Servers and applications
CVE-2024-0199
An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.
- Severity
- High 8.0
- Published
- 7 Mar 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 16.7.7, 16.8.4, 16.9.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GitLabServers and applications · cpe:a:gitlab:gitlab |
|