CVE-2023-0989

Summary

CVE-2023-0989 is a newly disclosed information disclosure vulnerability affecting GitLab CE/EE. Versions starting from 13.11 up to and including 16.4.1 are vulnerable. An attacker can exploit this issue by creating a malicious CI/CD configuration in a fork and tricking a user into visiting it. The vulnerability allows the extraction of non-protected CI/CD variables, potentially leading to sensitive data exposure. GitLab urges users to upgrade to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.