CVE-2023-34136

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jul 13, 2023
Updated: Jul 25, 2023
CWE ID 434

Summary

CVE-2023-3362 is an information disclosure vulnerability affecting GitLab CE and EE versions prior to 16.0.6 and 16.1.0. Unauthenticated actors can exploit this issue by accessing import error information when a project is imported from GitHub. This vulnerability could potentially expose sensitive data, making it crucial for affected organizations to upgrade their GitLab instances as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SonicWALL Global Management System

Affected Vendors

  • SonicWall Inc.