← back
CVE-2023-1098

CVE-2023-1098

CVSS 5.8 MEDIUMEPSS 0.9%CWE-535
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
GitLab · GitLab

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1098.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/383745https://hackerone.com/reports/1784294