CVE-2023-3362
Generation of Error Message Containing Sensitive Information in GitLab
Summary
Generation of Error Message Containing Sensitive Information in GitLab
Original description
The description as published by the source.
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"16.0.6"},{"introduced":"16.1.0"},{"fixed":"16.1.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com