VDB
CVE-2023-1936
CVE-2023-1936
PUBLISHED
CVSS 4.300000190734863 MEDIUM
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to leak the email address of a user who created a service desk issue.
EPSS 0.58% · 45.5th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.58%
45.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 13.7.0, 16.0.0, 16.1.0 |
| Bitnami | gitlab | 13.7.0, 16.0.0, 16.1.0 |
Timeline
- Jun 29, 2023 CVE Published
- Jul 11, 2023 EPSS Score
- Aug 15, 2023 EPSS Score
- Sep 19, 2023 EPSS Score
- Oct 25, 2023 EPSS Score
- Nov 29, 2023 EPSS Score
- Jan 3, 2024 EPSS Score
- Feb 7, 2024 EPSS Score
- Mar 13, 2024 EPSS Score
- Apr 17, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 27, 2024 EPSS Score