A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.
References
| Link | Resource |
|---|---|
| https://hackerone.com/reports/2012073 | Permissions Required |
| https://gitlab.com/gitlab-org/gitlab/-/issues/414269 | Broken Link |
Configurations
Configuration 1 (hide)
|
History
31 Jul 2023, 17:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://hackerone.com/reports/2012073 - Permissions Required | |
| References | (MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/414269 - Broken Link | |
| CPE | cpe:2.3:a:gitlab:gitlab:16.1.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
|
| First Time |
Gitlab gitlab
Gitlab |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | NVD-CWE-noinfo |
21 Jul 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-21 16:15
Updated : 2024-10-03 07:15
NVD link : CVE-2023-3102
Mitre link : CVE-2023-3102
JSON object : View
Products Affected
gitlab
- gitlab
CWE