VDB
CVE-2023-3900
CVE-2023-3900
PUBLISHED
CVSS 7.5 HIGH
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid 'start_sha' value on merge requests page may lead to Denial of Service as Changes tab would not load.
EPSS 0.92% · 59.6th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.92%
59.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.2.0, 16.1.0 |
| Bitnami | gitlab | 16.1.0, 16.2.0 |
Timeline
- Aug 1, 2023 CVE Published
- Aug 2, 2023 EPSS Score
- Sep 6, 2023 EPSS Score
- Nov 14, 2023 EPSS Score
- Dec 19, 2023 EPSS Score
- Jan 22, 2024 EPSS Score
- Apr 1, 2024 EPSS Score
- May 5, 2024 EPSS Score
- Jun 9, 2024 EPSS Score
- Jul 14, 2024 EPSS Score
- Sep 21, 2024 EPSS Score
- Oct 26, 2024 EPSS Score