CVE-2023-5831CWE-201

Insertion of Sensitive Information Into Sent Data in GitLab

Low · published November 6, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2023-11-06T10:30Z
EPSS history
Timeline
  • 06 NOV 10:30Z
    Insertion of Sensitive Information Into Sent Data in GitLab
    cvelistv5