An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 15.1.0 (including) | 16.7.6 (excluding) |
| Gitlab | Gitlab | 16.8.0 (including) | 16.8.3 (excluding) |
| Gitlab | Gitlab | 16.9.0 (including) | 16.9.0 (including) |