Unscored CVE-2019-6797 EUVD-2019-16355GHSA-w2gf-3qqp-3r4x

An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. …

Published May 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.

References

https://about.gitlab.com/blog/categories/releases/
https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/