CESS-2023-2069 — Vulnetix

CESS-2023-2069 PUBLISHED CVSS 4.3 MEDIUM

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables.

Risk Scores

CVSS 3.1

4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Timeline

May 3, 2023 CVE Published

Open in Interactive Console →