CVE-2023-3907

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-286

Affected software

Vendor	Product	Versions
GitLab	GitLab	>= 16.0, < 16.4.4; >= 16.5, < 16.5.4; >= 16.6, < 16.6.2

References

https://gitlab.com/gitlab-org/gitlab/-/issues/418878Issue Tracking, Vendor Advisory
https://hackerone.com/reports/2058934Permissions Required
https://gitlab.com/gitlab-org/gitlab/-/issues/418878Issue Tracking, Vendor Advisory
https://hackerone.com/reports/2058934Permissions Required

Timeline

Published: Dec 17, 2023
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-390707.8An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.CVE-2023-390739.8An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.CVE-2023-390754.6Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to c CVE-2023-390764.6Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle CVE-2023-390867.5ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.CVE-2023-39096.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before CVE-2023-390945.4Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username param CVE-2023-390965.4WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.CVE-2023-390975.4WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.CVE-2023-391068.8An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constr CVE-2023-391079.1An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwr CVE-2023-391088.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co