A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/414269 | Broken Link |
| https://hackerone.com/reports/2012073 | Permissions Required |
| https://gitlab.com/gitlab-org/gitlab/-/issues/414269 | Broken Link |
| https://hackerone.com/reports/2012073 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/414269 - Broken Link | |
| References | () https://hackerone.com/reports/2012073 - Permissions Required |
03 Oct 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-201 |
31 Jul 2023, 17:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/414269 - Broken Link | |
| References | (MISC) https://hackerone.com/reports/2012073 - Permissions Required | |
| First Time |
Gitlab
Gitlab gitlab |
|
| CPE | cpe:2.3:a:gitlab:gitlab:16.1.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
21 Jul 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-21 16:15
Updated : 2024-11-21 08:16
NVD link : CVE-2023-3102
Mitre link : CVE-2023-3102
CVE.ORG link : CVE-2023-3102
JSON object : View
Products Affected
gitlab
- gitlab
CWE