CVE-2022-1120
Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed s...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed sensitive information when an include directive fails in the CI/CD configuration.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"14.7.7"},{"introduced":"14.8.0"},{"fixed":"14.8.5"},{"introduced":"14.9.0"},{"fixed":"14.9.2"}]}]
Références
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov