CVE-2023-3362

Summary

CVE-2023-3362 is an information disclosure vulnerability in GitLab CE/EE. It affects all versions from 16.0 prior to 16.0.6, as well as version 16.1.0. The vulnerability allows unauthenticated actors to access the import error information if a project was imported from GitHub. The affected products include sRkmDB, sRkmDC, sRkmC9, and sRkmC-. To remediate this vulnerability, it is recommended to update GitLab to version 16.0.6 or later. The potential danger of this vulnerability lies in the unauthorized access to import error information, which could potentially expose sensitive data and compromise the security of an organization using GitLab CE/EE.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.