Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-4630
HistorySep 11, 2023 - 2:15 p.m.

CVE-2023-4630

2023-09-1114:15:09
Debian Security Bug Tracker
security-tracker.debian.org
11
gitlab
security issue
project imports
version 10.6
version 16.3.1
information disclosure
unix

CVSS3

5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS

0.001

Percentile

18.5%

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any project’s imports.

OSVersionArchitecturePackageVersionFilename
Debian999allgitlab< 16.4.4+ds2-2gitlab_16.4.4+ds2-2_all.deb

CVSS3

5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS

0.001

Percentile

18.5%