CVE-2024-0456

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-425

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-04597.2A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of tCVE-2024-04609.8A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processCVE-2024-04619.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown functionCVE-2024-04629.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability isCVE-2024-04639.8A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknoCVE-2024-04649.8A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the filCVE-2024-04655.3A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknCVE-2024-04669.8A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affectCVE-2024-04676.1A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknCVE-2024-04689.8A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerabilCVE-2024-04699.8A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some uCVE-2024-04709.8A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown
CVE-2024-0456: Medium severity, CVSS 4.3 | Vulnix