Description (CNA)
An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected >=11.6, <13.9.7; affected >=13.10.0, <13.10.4; affected >=13.11.0, <13.11.2 |
CWE
No CWE identifiers supplied.
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/230864
- https://hackerone.com/reports/928074
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22206.json
ADP enrichment
No English description supplied.