CVE-2023-1265 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-1265 PUBLISHED

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance.

EPSS 0.03% · 10.1th percentile

Risk Scores

EPSS Score

0.03%

10.1th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	11.9.0, 15.10.0, 15.11.0
Bitnami	gitlab	11.9.0, 15.10.0, 15.11.0

Timeline

May 2, 2023 CVE Published
May 4, 2023 EPSS Score
May 4, 2023 CVE Updated
Jun 9, 2023 EPSS Score
Jul 16, 2023 EPSS Score
Aug 21, 2023 EPSS Score
Sep 27, 2023 EPSS Score
Nov 2, 2023 EPSS Score
Dec 8, 2023 EPSS Score
Jan 14, 2024 EPSS Score
Feb 19, 2024 EPSS Score
Mar 26, 2024 EPSS Score

References

Open in Interactive Console →