CVE-2023-3102

MediumCVSS 5.3

Published: 21/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

A sensitive information leak issue has been discovered in GitLab EE affecting all versions from 16.0 to 16.0.6 and from 16.1 to 16.1.1. It allows access to titles of private issues and MRs.

Risk Assessment

The leak of sensitive information may lead to the exposure of confidential data, posing risks to user privacy and project security.

Recommendation

It is recommended to update GitLab EE to version 16.0.6 or 16.1.1 to mitigate this vulnerability.

Original NVD description (English source)

A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.