CVE-2023-5117
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
Résumé
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.6.0"}]}]
Références
- advisory gitlab.com
- web nvd.nist.gov