CVE-2023-5117
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
概要
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.6.0"}]}]
参照URL
- advisory gitlab.com
- web nvd.nist.gov