Lucene search
PRIOn knowledge basePRION:CVE-2023-2620HistoryJul 13, 2023 - 3:15 a.m.
Design/Logic Flaw
2023-07-1303:15:00
PRIOn knowledge base
www.prio-n.com
4
gitlab ce/ee
webhook url
secrets leakage
incomplete fix
cve-2023-0838
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1. A maintainer could modify a webhook URL to leak masked webhook secrets by manipulating other masked portions. This addresses an incomplete fix for CVE-2023-0838.
Related
nvd
nvd
CVE-2023-2620
2023-07-13 03:15:09
CVE-2023-0838
2023-04-05 21:15:07
cve
cve
CVE-2023-2620
2023-07-13 03:15:09
CVE-2023-0838
2023-04-05 21:15:07
nessus
nessus
GitLab 15.1 < 15.11.10 / 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-2620)
2023-06-29 00:00:00
GitLab 15.1 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0838)
2023-04-04 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (3117e6cd-1772-11ee-9cd6-001b217b3468)
2023-06-30 00:00:00
osv
osv
BIT-gitlab-2023-2620
2024-03-06 11:07:14
CVE-2023-2620
2023-07-13 03:15:09
BIT-gitlab-2023-0838
2024-03-06 11:11:53
debiancve
debiancve
CVE-2023-2620
2023-07-13 03:15:09
CVE-2023-0838
2023-04-05 21:15:07
cvelist
cvelist
CVE-2023-2620 Exposure of Sensitive Information to an Unauthorized Actor in GitLab
2023-07-13 02:11:05
CVE-2023-0838
2023-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2023-2620
2023-07-13 00:00:00
CVE-2023-0838
2023-04-05 00:00:00
veracode
veracode
Directory Traversal
2023-08-06 19:16:16
Information Disclosure
2023-08-07 00:14:36
prion
prion
Design/Logic Flaw
2023-04-05 21:15:00
freebsd
freebsd
Gitlab -- Vulnerabilities
2023-06-29 00:00:00
Gitlab -- Multiple Vulnerabilities
2023-03-30 00:00:00