CVE-2024-0410

—

CVSS 3.1

7.7 high

EPSS

<1%p38

Published

Feb 22, 2024 (Feb 22, 2024)

Modified

Jun 17, 2026

Description

An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.

Vendors: gitlab
Products: gitlab
Weakness: CWE-841
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.