CVE-2023-5117
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
Summary
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
Original description
The description as published by the source.
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.6.0"}]}]
References
- advisory gitlab.com
- web nvd.nist.gov