Non évaluée
Insertion of Sensitive Information Into Sent Data in GitLab
CVE-2023-3413
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible to read the source code of a project through a fork created before changing visibility to only project members.
Références
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com