VDB
CVE-2023-3922
CVE-2023-3922
PUBLISHED
CVSS 7.099999904632568 HIGH
An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to hijack some links and buttons on the GitLab UI to a malicious page.
EPSS 0.44% · 36.2th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
EPSS Score
0.44%
36.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.4.0, 16.2.0, 16.3.0 |
| Bitnami | gitlab | 16.3.0, 16.4.0, 16.2.0 |
Timeline
- Sep 28, 2023 CVE Published
- Sep 29, 2023 EPSS Score
- Oct 31, 2023 EPSS Score
- Dec 3, 2023 EPSS Score
- Jan 4, 2024 EPSS Score
- Feb 5, 2024 EPSS Score
- Mar 9, 2024 EPSS Score
- Apr 10, 2024 EPSS Score
- May 12, 2024 EPSS Score
- Jun 13, 2024 EPSS Score
- Jul 16, 2024 EPSS Score
- Aug 17, 2024 EPSS Score