CVE-2023-1936
CVSS Score of 10 (low)
Details
Summary
CVE-2023-1936 is a vulnerability that affects GitLab CE/EE versions 13.7 through 16.1.1, allowing an attacker to leak the email address of a user who created a service desk issue. The affected products include various versions of iYgV6, qYljS, iwVpB, mPkRu, rXDzV, kdw-V, u0xTZS, oxmg8, g9boPW, rFFdvJ, laJZ8s, jErdWl, sRkmC, nlH3Yw, ooozMp, hvNFq8, nWDzmW, tzcV7l, nGdMG4, powZUr and others. The vulnerability has a base severity score of 4.3 and is classified as CWE-284 (Improper Access Control). Remediation for this vulnerability involves updating GitLab to version 15.11.10 or higher for versions 13.x and 14.x and upgrading to version 16.1.1 or higher for version 15.x and newer to mitigate the risk of data leakage and potential unauthorized access to user email addresses. Note: The information provided in this report is based on the given text and may not include all relevant details about the vulnerability. It is always recommended to refer to official sources for comprehensive information on vulnerabilities and their remediation steps.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions