CVE-2023-5612 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-5612 PUBLISHED

An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.

EPSS 25.62% · 96.2th percentile

Risk Scores

EPSS Score

25.62%

96.2th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	0, 16.7.0, 16.8.0
Bitnami	gitlab	0, 16.7.0, 16.8.0

Timeline

Jan 20, 1970 Metasploit Module
Jan 21, 1970 Security Advisory
Jan 25, 2024 CVE Published
Jan 31, 2024 EPSS Score
Feb 27, 2024 EPSS Score
Mar 6, 2024 PoC Published
Apr 21, 2024 EPSS Score
May 18, 2024 EPSS Score
Jul 11, 2024 EPSS Score
Aug 7, 2024 EPSS Score
Sep 3, 2024 EPSS Score
Oct 5, 2024 Coalition ESS Score

References

Open in Interactive Console →