Unrated severityNVD Advisory· Published Jun 7, 2023· Updated Jan 7, 2025

Insertion of Sensitive Information Into Sent Data in GitLab

CVE-2023-1825

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. It was possible to disclose issue notes to an unauthorized user at project export.

Affected products

GitLab Inc./CE/EEllm-fuzzy
Range: >=15.7 <15.10.8 || >=15.11 <15.11.7 || >=16.0 <16.0.2
osv-coords
pkg:bitnami/gitlab
Range: >= 15.7.0, < 15.10.8
GitLab Inc./GitLabv5
Range: >=15.7, <15.10.8

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1825.jsonmitre
gitlab.com/gitlab-org/gitlab/-/issues/384035mitre

News mentions

GitLab Security Release: 16.0.2, 15.11.7, and 15.10.8
GitLab Security Releases · Jun 5, 2023

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000