CVE-2023-3993
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.
Risk Assessment
The organization may be exposed to access token leakage, which could lead to unauthorized access to system resources.
Recommendation
It is recommended to update GitLab EE to the latest version to mitigate this vulnerability and to monitor logs for potential abuse.
Original NVD description (English source)
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.