We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-1210

Generation of Error Message Containing Sensitive Information in GitLab



AssignerGitLab
Reserved2023-03-06
Published2023-08-01
Updated2024-10-03

Description

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to leak a user's email via an error message for groups that restrict membership by email domain.



LOW: 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Product status

Default status
unaffected

12.9 before 16.0.8
affected

16.1.0 before 16.1.3
affected

16.2.0 before 16.2.2
affected

Credits

Thanks [shells3c](https://hackerone.com/shells3c) for reporting this vulnerability through our HackerOne bug bounty program finder

References

https://gitlab.com/gitlab-org/gitlab/-/issues/394775 (GitLab Issue #394775) issue-tracking

https://hackerone.com/reports/1884672 (HackerOne Bug Bounty Report #1884672) technical-description exploit permissions-required

cve.org CVE-2023-1210

nvd.nist.gov CVE-2023-1210

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-1210

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.

© Copyright 2024 THREATINT
Made in Cyprus with ❤ + ☼
 System status
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
Error loading Crisp.chat. Please check your web content filter and browser plugins.