Unrated

Insertion of Sensitive Information Into Sent Data in GitLab

CVE-2023-3102 First seen on SecPulse Jul 22, 2023

Original description The description as published by the source.

A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Key facts

Severity: Unrated
Published: Jul 22, 2023
First seen on SecPulse: Jul 22, 2023
CWE: CWE-201

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58