VDB
CVE-2023-3950
CVE-2023-3950
PUBLISHED
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.
EPSS 0.06% · 18.4th percentile
Risk Scores
EPSS Score
0.06%
18.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.2.0, 16.3.0 |
| Bitnami | gitlab | 16.2.0, 16.3.0 |
Exploit Intelligence
- CIRCL seen: CVE-2023-3950 (circl-sighting)
- GitLab Issue #419675 (circl)
- https://hackerone.com/reports/2079154 (osv)
Timeline
- Aug 31, 2023 CVE Published
- Sep 1, 2023 PoC Published
- Sep 2, 2023 EPSS Score
- Sep 3, 2023 CVE Updated
- Oct 5, 2023 EPSS Score
- Nov 7, 2023 EPSS Score
- Dec 9, 2023 EPSS Score
- Jan 11, 2024 EPSS Score
- Feb 13, 2024 EPSS Score
- Mar 17, 2024 EPSS Score
- Apr 19, 2024 EPSS Score
- May 21, 2024 EPSS Score