CVE-2023-3949
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 1, 2023
Updated: Dec 6, 2023
CWE ID 200
Summary
CVE-2023-3949: A vulnerability has been identified in GitLab affecting multiple versions from 11.3 to 16.6. Unauthorized users could potentially view release descriptions of public projects through an atom endpoint, despite having restricted release access set to project members only.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share