CVE-2023-3914

Name of the Vulnerable Software and Affected Versions GitLab EE versions prior to 16.2.8 GitLab EE version 16.3 prior to 16.3.5 GitLab EE version 16.4 prior to 16.4.1

Description A business logic error in GitLab EE allows access to internal projects. This occurs because a service account is not deleted when a namespace is deleted, thus enabling access to internal projects.

Recommendations For versions prior to 16.2.8, update to version 16.2.8 or later. For version 16.3 prior to 16.3.5, update to version 16.3.5 or later. For version 16.4 prior to 16.4.1, update to version 16.4.1 or later.