---
cve: "CVE-2023-4379"
severity: "HIGH"
cvss: 8.1
epss: "50%"
vendor: "GitLab"
kev: false
exploited: false
published: "2023-11-09 21:01:10"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T20:07:01+02:00"
---

# CVE-2023-4379

> 8.1 HIGH

## Beschreibung

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Erforderlich | good |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Keine | good |

## Patch verfügbar (OSV)

- 7fc27fe692abccaed7e2e0ebfea2aadf5140593f (Commit)
- 40d6bde8c59f78957b08b3a7cd9622a97b7af981 (Commit)

## Referenzen

- <https://gitlab.com/gitlab-org/gitlab/-/issues/415496>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-4379) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_