5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
4.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.9%
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration.
CPE | Name | Operator | Version |
---|---|---|---|
gitlab:gitlab | gitlab | lt | 15.8.5 |
gitlab:gitlab | gitlab | lt | 15.9.4 |
gitlab:gitlab | gitlab | eq | 15.10.0 |
[
{
"vendor": "GitLab",
"product": "GitLab",
"versions": [
{
"version": ">=11.5, <15.8.5",
"status": "affected"
},
{
"version": ">=15.9, <15.9.4",
"status": "affected"
},
{
"version": ">=15.10, <15.10.1",
"status": "affected"
}
]
}
]
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
4.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.9%