Veracode Vulnerability DatabaseVERACODE:44855Sensitive Information Disclosure
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
gitlab:sid is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the exposure of sensitive information which affects in GitLab versions from 10.6 before 16.1.5. This vulnerability allows the attacker to read limited information about any project’s imports.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%