CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
18.5%
gitlab:sid is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the exposure of sensitive information which affects in GitLab versions from 10.6 before 16.1.5. This vulnerability allows the attacker to read limited information about any project’s imports.