p PatchFirst

CVE-2023-2069

CVE-2023-2069

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables.

CVSS 6.4 · Medium · EPSS 0.8%

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • >=10.0, <12.9.8: Affected
    • >=12.10, <12.10.7: Affected
    • >=13.0, <13.0.1: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →