mickmick.net

GitLab Information Disclosure Vulnerabilities

Release Date: 25 May 2023

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in GitLab. A remote attacker could exploit this vulnerability to trigger information disclosure on the targeted system.

---

Impact

• Information Disclosure

---

System / Technologies affected

• GitLab Community Edition (CE) version 16.0.0
• GitLab Enterprise Edition (EE) version 16.0.0

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/

---

Vulnerability Identifier

• CVE-2023-2825

---

Source

• AusCERT
• GitLab

---

Related Link

• https://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/