vulnerability

Gitlab Gitlab: CVE-2023-3441: Exposure of Sensitive Information Due to Incompatible Policies

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:M/Au:M/C:C/I:P/A:N)	Oct 1, 2024	Apr 22, 2025	Sep 18, 2025

Severity

CVSS

(AV:N/AC:M/Au:M/C:C/I:P/A:N)

Published

Oct 1, 2024

Added

Apr 22, 2025

Modified

Sep 18, 2025

Description

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches.

Solution

gitlab-gitlab-upgrade-latest

References

CWE-213
CVE-2023-3441
https://attackerkb.com/topics/CVE-2023-3441
URL-https://gitlab.com/gitlab-org/gitlab/-/issues/416482
URL-https://gitlab.com/gitlab-org/gitlab/-/issues/417284
URL-https://hackerone.com/reports/2033561
URL-https://hackerone.com/reports/2041385

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today