Insertion of Sensitive Information Into Sent Data in GitLab(CVE-2023-1401)

概要

Insertion of Sensitive Information Into Sent Data in GitLab

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"3.0.29"},{"fixed":"4.0.5"}]}]

参照URL

advisory gitlab.com
advisory hackerone.com
web nvd.nist.gov