CVE-2023-3362

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.0 through 16.0.5 GitLab CE/EE version 16.1.0

Description An information disclosure issue in GitLab CE/EE allows unauthenticated actors to access the import error information if a project was imported from GitHub.

Recommendations For GitLab CE/EE versions 16.0 through 16.0.5, update to version 16.0.6 or later. For GitLab CE/EE version 16.1.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to project import error information until a patch is available.