CVE-2023-1401CWE-201

Insertion of Sensitive Information Into Sent Data in GitLab

Medium · published July 26, 2023

CVSS v3.1
5.0
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.5th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2023-07-26T06:01Z
EPSS history
Timeline
  • 26 JUL 06:01Z
    Insertion of Sensitive Information Into Sent Data in GitLab
    cvelistv5