CVE-2023-3363

3.8 lowEPSS 0.2%

Low (3.8) in gitlab gitlab. EPSS 0.2% chance of exploitation in the next 30 days.

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to `default`.

Severity

CVSS 3.1

3.8 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2023-07-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gitlab:gitlab

References

https://gitlab.com/gitlab-org/gitlab/-/issues/409034
https://gitlab.com/gitlab-org/gitlab/-/issues/409034

Check your stack JSON