CVE-2023-3950 | BDVDB-2026-210873 Detail

Description#

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-09-01Record published in the CVE List.
2. Version 22026-05-06Most recent update recorded in the CVE List.