Shells3

**Name of the Vulnerable Software and Affected Versions** GitLab versions prior to 15.9.6 GitLab versions 15.10.0 through 15.10.4 GitLab versions 15.11.0 **Description** An issue has been discovered in GitLab, allowing an attacker to map a private email of a GitLab user to their GitLab account on an instance under certain conditions. **Recommendations** For versions prior to 15.9.6, update to version 15.9.6 or later. For versions 15.10.0 through 15.10.4, update to version 15.10.5 or later. For version 15.11.0, update to version 15.11.1 or later.

**Name of the Vulnerable Software and Affected Versions** GitLab versions 15.0 through 15.8.4 GitLab versions 15.9 through 15.9.3 GitLab versions 15.10 through 15.10.0 **Description** A sensitive information disclosure issue in GitLab allows an attacker to view the count of internal notes for a given issue. **Recommendations** For GitLab versions 15.0 through 15.8.4, update to version 15.8.5 or later. For GitLab versions 15.9 through 15.9.3, update to version 15.9.4 or later. For GitLab versions 15.10 through 15.10.0, update to version 15.10.1 or later.

**Name of the Vulnerable Software and Affected Versions** Gitlab EE/CE versions 11.0 through 14.8.5 Gitlab EE/CE versions 14.9 through 14.9.3 Gitlab EE/CE versions 14.10 through 14.10.0 **Description** The issue is related to an insecure direct object reference vulnerability. This vulnerability may allow an endpoint to reveal the issue title to a user who crafted an API call with the ID of the issue from a public project that restricts access to issue only to project members. **Recommendations** For versions 11.0 through 14.8.5, update to version 14.8.6 or later. For versions 14.9 through 14.9.3, update to version 14.9.4 or later. For versions 14.10 through 14.10.0, update to version 14.10.1 or later.