{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T00:31:13.610","vulnerabilities":[{"cve":{"id":"CVE-2023-4378","sourceIdentifier":"cve@gitlab.com","published":"2023-09-01T11:15:43.113","lastModified":"2026-06-17T06:37:42.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak the sentry token by changing the configured URL in the Sentry error tracking settings page. This was as a result of an incomplete fix for CVE-2022-4365."},{"lang":"es","value":"Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 11.8 anteriores a la 16.1.5, todas las versiones a partir de la 16.2 anteriores a la 16.2.5, todas las versiones a partir de la 16.3 anteriores a la 16.3.1. Un mantenedor malicioso puede, bajo circunstancias específicas, filtrar el token de Sentry al cambiar la URL configurada en la página de configuración de seguimiento de errores de Sentry. Esto fue como resultado de una solución incompleta para CVE-2022-4365."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"GitLab","product":"GitLab","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"git://git@gitlab.com:gitlab-org/gitlab.git","versions":[{"version":"11.8","lessThan":"16.1.5","versionType":"semver","status":"affected"},{"version":"16.2","lessThan":"16.2.5","versionType":"semver","status":"affected"},{"version":"16.3","lessThan":"16.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T15:48:23.298311Z","id":"CVE-2023-4378","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@gitlab.com","type":"Secondary","description":[{"lang":"en","value":"CWE-201"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"11.8.0","versionEndExcluding":"16.1.5","matchCriteriaId":"593DB34F-FA65-443F-B5E8-D6C2FA38EC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"11.8.0","versionEndExcluding":"16.1.5","matchCriteriaId":"BF3A9B30-D096-478C-A38E-BC0620852F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"16.2","versionEndExcluding":"16.2.5","matchCriteriaId":"18116007-7452-495F-80A1-39499882656E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.2","versionEndExcluding":"16.2.5","matchCriteriaId":"4E03E8BA-63C8-47D5-B5A1-26DF199E1F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:16.3.0:*:*:*:community:*:*:*","matchCriteriaId":"EE9B8DE8-9990-494B-BDBE-F867DDBB9D57"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:16.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"08D6B555-39B6-493D-8460-3DC998BAF651"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/422134","source":"cve@gitlab.com","tags":["Broken Link"]},{"url":"https://hackerone.com/reports/2104591","source":"cve@gitlab.com","tags":["Permissions Required"]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/422134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://hackerone.com/reports/2104591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]}]}}]}