Medium severity6.4NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026
CVE-2023-2069
CVE-2023-2069
Description
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4from 10.0 before 12.9.8, from 12.10 before 12.10.7, from 13.0 before 13.0.1+ 2 more
- (no CPE)range: from 10.0 before 12.9.8, from 12.10 before 12.10.7, from 13.0 before 13.0.1
- (no CPE)range: >=10.0, <12.9.8
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=10.0,<12.9.8
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2069.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/407374nvdBroken Link
- hackerone.com/reports/1939987nvdPermissions Required
News mentions
0No linked articles in our index yet.