Beveiligingsadvies

CVE-2023-5117

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-25 14:46:47
Laatst bijgewerkt 2024-12-26 18:10:54
Toegewezen door GitLab
CVSS-score 3.7
Status PUBLISHED

Beschrijving

An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.