PT-2023-17264
CVE-2023-1825
·
Published
2023-06-07
·
Updated
2025-03-20
Description by
CVSS 3.1
3.1
LowMetricsAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 15.7 through 15.10.7
GitLab EE versions 15.11 through 15.11.6
GitLab EE versions 16.0 through 16.0.1
Description
An issue has been discovered in GitLab EE, where it was possible to disclose issue notes to an unauthorized user at project export.
Recommendations
For versions 15.7 through 15.10.7, update to version 15.10.8 or later.
For versions 15.11 through 15.11.6, update to version 15.11.7 or later.
For versions 16.0 through 16.0.1, update to version 16.0.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾