Riskcovery

CVE-2023-3363

Insertion of Sensitive Information into Log File in GitLab

State
Published
Severity
3.9 Low
Published
Jul 13, 2023
Updated
Nov 5, 2024
Reserved
Jun 22, 2023

Read the record on cve.org

Description

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to `default`.

Scores

CVSSScoreVectorSource
3.13.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:NGitLab

Weaknesses

  • CWE-532 Insertion of Sensitive Information into Log File

Affected Products

ProductVersions
GitLabGitLab
  • 13.6 to before 15.11.10Affected
  • 16.0 to before 16.0.6Affected
  • 16.1 to before 16.1.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.