Vulnerability Database

300,926

Total vulnerabilities in the database

CVE-2023-0483

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site.

Published: Mar 9, 2023
Updated: Apr 14, 2023
CVE: CVE-2023-0483
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 3.8
AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
gitlab / gitlab	15.9.0	15.9.2
gitlab / gitlab	15.8.0	15.8.4
gitlab / gitlab	12.1.0	15.7.8

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0483.json
https://gitlab.com/gitlab-org/gitlab/-/issues/389188
https://hackerone.com/reports/1836466

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo