Lucene search
Veracode Vulnerability DatabaseVERACODE:42432HistoryAug 06, 2023 - 8:11 p.m.
Information Disclosure
2023-08-0620:11:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
gitlab
information disclosure
datadog
vulnerability
data handling
contributor emails
software
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.7%
gitlab is vulnerable to Information Disclosure. The vulnerability occurs due to incorrect data handling within the datadog integration resulting in gitlab returning contributor emails.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
osv
osv
CVE-2022-2534
2022-08-05 16:15:12
BIT-gitlab-2022-2534
2024-03-06 11:14:58
ubuntucve
ubuntucve
CVE-2022-2534
2022-08-05 00:00:00
cve
cve
CVE-2022-2534
2022-08-05 16:15:12
nvd
nvd
CVE-2022-2534
2022-08-05 16:15:12
nessus
nessus
GitLab 9.3 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2534)
2022-08-03 00:00:00
debiancve
debiancve
CVE-2022-2534
2022-08-05 16:15:12
openvas
openvas
cvelist
cvelist
CVE-2022-2534
2022-08-05 15:11:53
prion
prion
Information disclosure
2022-08-05 16:15:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-07-28 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.7%
Related for VERACODE:42432