CVE-2023-0483
First published: Thu Mar 09 2023(Updated: )
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab | >=12.1.0<15.7.8 | |
| GitLab | >=12.1.0<15.7.8 | |
| GitLab | >=15.8.0<15.8.4 | |
| GitLab | >=15.8.0<15.8.4 | |
| GitLab | >=15.9.0<15.9.2 | |
| GitLab | >=15.9.0<15.9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-0483?
CVE-2023-0483 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive API keys.
How do I fix CVE-2023-0483?
To mitigate CVE-2023-0483, update GitLab to the latest version beyond 15.7.8, 15.8.4, or 15.9.2 as applicable.
Who is affected by CVE-2023-0483?
CVE-2023-0483 affects all GitLab versions starting from 12.1 to just before 15.7.8, 15.8 to just before 15.8.4, and 15.9 to just before 15.9.2.
What impact does CVE-2023-0483 have on GitLab users?
If exploited, CVE-2023-0483 allows a project maintainer to extract sensitive Datadog integration API keys, potentially compromising services.
When was CVE-2023-0483 discovered?
CVE-2023-0483 was recently discovered and affects multiple versions of GitLab before the specified patch releases.
- agent/type
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/gitlab
- canonical/gitlab
- version/gitlab/12.1.0
- version/gitlab/15.8.0
- version/gitlab/15.9.0