Lucene search
PRIOn knowledge basePRION:CVE-2023-0838HistoryApr 05, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-04-0521:15:00
PRIOn knowledge base
www.prio-n.com
5
gitlab
version 15.1-15.10.1
webhook
url
modification
flaw
cve-2022-4342
security
An issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. A maintainer could modify a webhook URL to leak masked webhook secrets by adding a new parameter to the url. This addresses an incomplete fix for CVE-2022-4342.
Related
cvelist
cvelist
CVE-2023-0838
2023-04-05 00:00:00
CVE-2022-4342
2023-01-12 00:00:00
osv
osv
BIT-gitlab-2023-0838
2024-03-06 11:11:53
CVE-2023-0838
2023-04-05 21:15:07
BIT-gitlab-2022-4342
2024-03-06 11:13:03
ubuntucve
ubuntucve
debiancve
debiancve
cve
cve
nessus
nessus
GitLab 15.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0838)
2023-04-04 00:00:00
GitLab 15.1 < 15.5.7 / 15.6 < 15.6.4 / 15.7 < 15.7.2 (CVE-2022-4342)
2024-01-03 00:00:00
GitLab < 15.5.7 / 15.6 < 15.6.4 / 15.7 < 15.7.2 (CVE-2022-4342)
2023-02-08 00:00:00
nvd
nvd
prion
prion
Design/Logic Flaw
2023-01-12 04:15:00
Design/Logic Flaw
2023-07-13 03:15:00
veracode
veracode
Leakage Of Webhook Secret
2023-08-07 00:27:13
Directory Traversal
2023-08-06 19:16:16
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2023-01-09 00:00:00
Gitlab -- Multiple Vulnerabilities
2023-03-30 00:00:00