Description
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 14.3 – < 16.0.8, 16.1 – < 16.1.3, 16.2 – < 16.2.2 | 16.0.8 |
Advisories 1
- WID-SEC-2023-1945 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 2, 2023
References
- GitLab Issue #409570 issue-tracking permissions-required