VDB
CVE-2023-3950
CVE-2023-3950
PUBLISHED
CVSS 3.799999952316284 LOW
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.
EPSS 0.25% · 15.1th percentile
Risk Scores
CVSS 3.1
3.799999952316284
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.25%
15.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.2.0, 16.3.0 |
| Bitnami | gitlab | 16.2.0, 16.3.0 |
Timeline
- Aug 31, 2023 CVE Published
- Sep 1, 2023 PoC Published
- Sep 2, 2023 EPSS Score
- Oct 5, 2023 EPSS Score
- Nov 7, 2023 EPSS Score
- Dec 11, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 15, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 24, 2024 EPSS Score
- Jun 27, 2024 EPSS Score