VDB
CVE-2023-5198
CVE-2023-5198
PUBLISHED
CVSS 4.300000190734863 MEDIUM
An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys.
EPSS 0.50% · 40.9th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.50%
40.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 0, 16.4.0, 16.3.0 |
| Bitnami | gitlab | 0, 16.3.0, 16.4.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Sep 28, 2023 CVE Published
- Sep 29, 2023 EPSS Score
- Oct 31, 2023 EPSS Score
- Dec 3, 2023 EPSS Score
- Jan 4, 2024 EPSS Score
- Feb 5, 2024 EPSS Score
- Mar 9, 2024 EPSS Score
- Apr 10, 2024 EPSS Score
- May 12, 2024 EPSS Score
- Jun 13, 2024 EPSS Score
- Jul 16, 2024 EPSS Score