Generation of Error Message Containing Sensitive Information…(CVE-2023-3362)

概要

Generation of Error Message Containing Sensitive Information in GitLab

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.0.6"},{"introduced":"16.1.0"},{"fixed":"16.1.1"}]}]

参照URL

advisory gitlab.com
web nvd.nist.gov