CVE-2024-7554
Exposure of Sensitive Information to an Unauthorized Actor in GitLab
Résumé
Exposure of Sensitive Information to an Unauthorized Actor in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions starting from 17.1 before 17.1.4, all versions starting from 17.2 before 17.2.2. Under certain conditions, access tokens may have been logged when an API request was made in a specific manner.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.9.0"},{"fixed":"17.0.6"},{"introduced":"17.1.0"},{"fixed":"17.1.4"},{"introduced":"17.2.0"},{"fixed":"17.2.2"}]}]
Références
- web gitlab.com
- web nvd.nist.gov