CVE-2022-3018
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"9.3.0"},{"fixed":"15.2.5"},{"introduced":"15.3.0"},{"fixed":"15.3.4"},{"introduced":"15.4.0"},{"fixed":"15.4.1"}]}]
Références
- advisory gitlab.com
- advisory gitlab.com
- web nvd.nist.gov