CVE-2023-0326

Опубликовано: 27 мар. 2023

Источник: nvd

CVSS3: 5

CVSS3: 4.3

EPSS Низкий

Описание

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/388132
Exploit
Vendor Advisory
https://hackerone.com/reports/1826896
Permissions Required
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/388132
Exploit
Vendor Advisory
https://hackerone.com/reports/1826896
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitlab:dynamic_application_security_testing_analyzer:*:*:*:*:*:*:*:*

Версия от 1.6.50 (включая) до 2.11.0 (исключая)

EPSS

Процентиль: 39%

0.00173

Низкий

5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5885-hj3c-73cr

CVSS3: 4.3

github

почти 3 года назад

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.

EPSS

Процентиль: 39%

0.00173

Низкий

5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo