VDB
CVE-2022-3018
CVE-2022-3018
PUBLISHED
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.
EPSS 0.17% · 37.5th percentile
Risk Scores
EPSS Score
0.17%
37.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 9.3.0, 15.4.0, 15.3.0 |
| Bitnami | gitlab | 9.3.0, 15.3.0, 15.4.0 |
Timeline
- Jul 1, 2022 CVE Published
- Oct 29, 2022 EPSS Score
- Dec 11, 2022 EPSS Score
- Jan 24, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 8, 2023 EPSS Score
- Apr 20, 2023 EPSS Score
- Jun 3, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
- Nov 23, 2023 EPSS Score