CoreCVE
Back

MEDIUM

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1

Published Jan 24, 2023

Description

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to unmask webhook secret tokens by reviewing the logs after testing webhooks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitLab
Published Jan 24, 2023
Updated Apr 2, 2025
Reserved Nov 8, 2022
Link CVE-2022-3902

CISA Vulnrichment

Updated Apr 2, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-3902

Red Hat

No data

ENISA EUVD

Assigner GitLab
Published Jan 24, 2023
Updated Apr 2, 2025
Link EUVD-2022-43238

GitHub

No data