CVE-2023-6564

Summary

CVE-2023-6564 is a vulnerability affecting GitLab EE Premium and Ultimate versions 16.4.3, 16.5.3, and 16.6.1. In these versions, a problem has been identified where subgroup members with the Developer role may gain unintended push or merge permissions on protected branches. This issue arises due to a misconfiguration in projects utilizing subgroups for access control. This vulnerability could potentially lead to unauthorized changes being made to protected branches. Organizations using the mentioned GitLab versions are advised to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.