Gitlab · Gitlab · CVE-2024-0456
**Name of the Vulnerable Software and Affected Versions**
GitLab versions 14.0 through 16.6.5
GitLab versions 16.7 through 16.7.3
GitLab versions 16.8 through 16.8.0
**Description**
An authorization issue exists, allowing an unauthorized attacker to assign arbitrary users to merge requests (MRs) they created within a project.
**Recommendations**
For versions 14.0 through 16.6.5, update to version 16.6.6 or later.
For versions 16.7 through 16.7.3, update to version 16.7.4 or later.
For versions 16.8 through 16.8.0, update to version 16.8.1 or later.