Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-3993

Опубликовано: 02 авг. 2023
Источник: redhat
EPSS Низкий

Описание

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.

Отчет

The GitLab package used in OpenShift is a GitLab API NodeJS library which is not affected by CVE-2023-3993.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 4openshift4/ose-consoleNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2228522gitlab: access tokens may have been logged on specific queries

EPSS

Процентиль: 24%
0.0008
Низкий

Связанные уязвимости

CVSS3: 4.9
nvd
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.

CVSS3: 4.9
debian
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions start ...

CVSS3: 4.9
github
больше 2 лет назад

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.

EPSS

Процентиль: 24%
0.0008
Низкий