CVE-2023-5117 — Exposure of Sensitive Information Due to Incompatible Policies in GitLab

CVE-2023-5117

Exposure of Sensitive Information Due to Incompatible Policies in GitLab PUBLISHED

Description (CNA)

An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 0 before 17.6.0

CWE

CWE-213

References

https://gitlab.com/gitlab-org/gitlab/-/issues/398250

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.