MEDIUM
Insertion of Sensitive Information Into Sent Data in GitLab
Published Jul 21, 2023
5.3
MEDIUMCVSS 3.1
EPSS 0.58%
Description
A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.
Affected products
-
Affected
- ≥ 16.0, < 16.0.6
- ≥ 16.1, < 16.1.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Upgrade to versions 16.0.6, 16.1.1 or above.
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43789 Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/414269 issue-trackingBroken Link
- https://hackerone.com/reports/2012073 technical-descriptionexploitpermissions-requiredPermissions Required
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43789 | Advisory | |
| https://gitlab.com/gitlab-org/gitlab/-/issues/414269 | issue-trackingBroken Link | |
| https://hackerone.com/reports/2012073 | technical-descriptionexploitpermissions-requiredPermissions Required |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitLab
Published Jul 21, 2023
Updated Nov 20, 2025
Reserved Jun 5, 2023
Link CVE-2023-3102
CISA Vulnrichment
Updated Jul 24, 2024
Red Hat
No data
GitHub
No data