Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44821
HistoryDec 25, 2023 - 10:53 p.m.

Information Exposure

2023-12-2522:53:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
gitlab
information exposure
vulnerability
feature flag
unauthorized individuals
software

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

17.0%

gitlab is vulnerable to Information Exposure. The vulnerability is due to super_sidebar_logged_out feature flag. When this feature flag is enabled, it may unintentionally disclose GitLab version metadata to unauthorized individuals.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

17.0%