CyberRota Analysis
AI-GeneratedGitLab versions from 16.11 to 19.2.8, 19.3 to 19.3.5, and 19.4 to 19.4.2 are vulnerable to a flaw that allows authenticated users to approve merge requests they contributed to, due to improper identity resolution. This could lead to unauthorized code changes being merged, potentially compromising the integrity of the codebase. Organizations using affected GitLab versions should prioritize remediation to prevent potential exploitation by malicious insiders.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identity resolution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)