CVE-2023-3362
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
An information disclosure issue in GitLab CE/EE affects all versions from 16.0 prior to 16.0.6, and version 16.1.0. It allows unauthenticated actors to access the import error information if a project was imported from GitHub.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information regarding import errors of projects, which could lead to further attacks or misuse.
Recommendation
It is recommended to update GitLab to version 16.0.6 or newer to mitigate this vulnerability.
Original NVD description (English source)
An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 allows unauthenticated actors to access the import error information if a project was imported from GitHub.