CVEvulnerability

CVE-2023-0483

3.8 LOW Published 2023-03-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
3.8 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Description

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site.

Affected configurations

• gitlab gitlab (>= 12.1.0 < 15.7.8) • gitlab gitlab (>= 15.8.0 < 15.8.4) • gitlab gitlab (>= 15.9.0 < 15.9.2)

References