Non évaluée

Insertion of Sensitive Information Into Sent Data in GitLab

CVE-2023-3102 Première détection SecPulse Jul 22, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Faits clés

Gravité: Non évaluée
Publication: Jul 22, 2023
Première détection SecPulse: Jul 22, 2023
CWE: CWE-201

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58