CVE-2023-4658

Summary

CVE-2023-4658 is a vulnerability affecting GitLab Enterprise Edition (EE). This issue impacts versions 8.13 and later before 16.4.3, 16.5 and later before 16.5.3, and 16.6 and later before 16.6.1. An attacker can exploit this vulnerability by abusing the `Allowed to merge` permission, which can be granted to a guest user through a group. This flaw poses a potential risk, as it enables unauthorized users to make changes to repositories. It is crucial that affected organizations upgrade to the patched versions as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.