CVE-2023-3950 (published 2023-09-01T10:30:46.990Z)
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it.
Affected products: Vendor: GitLab
Product: GitLab
Versions: 16.2, 16.3