CVE-2023-2620 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-2620 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1. A maintainer could modify a webhook URL to leak masked webhook secrets by manipulating other masked portions. This addresses an incomplete fix for CVE-2023-0838.

EPSS 0.35% · 57.0th percentile

Risk Scores

EPSS Score

0.35%

57.0th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	15.1.0, 16.0.0, 16.1.0
Bitnami	gitlab	15.1.0, 16.0.0, 16.1.0

Timeline

Jun 29, 2023 CVE Published
Jul 14, 2023 EPSS Score
Aug 17, 2023 EPSS Score
Sep 20, 2023 EPSS Score
Oct 24, 2023 EPSS Score
Nov 27, 2023 EPSS Score
Dec 31, 2023 EPSS Score
Feb 3, 2024 EPSS Score
Mar 8, 2024 EPSS Score
Apr 10, 2024 EPSS Score
May 14, 2024 EPSS Score
Jun 17, 2024 EPSS Score

References

Open in Interactive Console →