VDB
CVE-2023-4532
CVE-2023-4532
PUBLISHED
CVSS 4.300000190734863 MEDIUM
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of.
EPSS 0.53% · 42.9th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.53%
42.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.4.0, 16.2.0, 16.3.0 |
| Bitnami | gitlab | 16.2.0, 16.3.0, 16.4.0 |
Timeline
- Sep 28, 2023 CVE Published
- Sep 29, 2023 EPSS Score
- Oct 31, 2023 EPSS Score
- Dec 3, 2023 EPSS Score
- Jan 4, 2024 EPSS Score
- Feb 5, 2024 EPSS Score
- Mar 9, 2024 EPSS Score
- Apr 10, 2024 EPSS Score
- May 12, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
- Jul 16, 2024 EPSS Score
- Aug 17, 2024 EPSS Score