Description
A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 16.0 – < 16.0.6, 16.1 – < 16.1.1 | 16.0.6 |
Advisories 1
- WID-SEC-2023-1604 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023
References
- GitLab Issue #414269 issue-tracking
- HackerOne Bug Bounty Report #2012073 technical-description exploit permissions-required