---
id: CVE-2023-4630
title: Missing Authorization in GitLab
summary: >-
  An issue has been discovered in GitLab affecting all versions starting from
  10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all
  versions starting from 16.3 before 16.3.1 in which any user can read limited
  information a…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-862
vendor: GitLab
product: GitLab
affected:
  - GitLab >= 10.6 < 16.1.5
  - GitLab >= 16.2 < 16.2.5
  - GitLab >= 16.3 < 16.3.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-08-30T15:19:12.333205Z'
published: '2023-09-11'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T04:07:12.177Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-4630'
references:
  - url: 'https://gitlab.com/gitlab-org/gitlab/-/issues/415117'
    label: 'GitLab Issue #415117'
tags:
  - cve.org
epss: 0.00479
epssPercentile: 0.39799
ingestedAt: '2026-10-15T02:18:34.411Z'
---

## Overview

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any project's imports.

## Affected

- `GitLab >= 10.6 < 16.1.5`
- `GitLab >= 16.2 < 16.2.5`
- `GitLab >= 16.3 < 16.3.1`

## Remediation

Upgrade to versions 16.1.5, 16.2.5, 16.3.1 or above.