CVE-2023-6944
CVSS 3.1 Score 5.7 of 10 (medium)
Details
Published Jan 4, 2024
Updated: Feb 4, 2024
CWE ID 209
Summary
CVE-2023-6944: A vulnerability was discovered in the Red Hat Developer Hub's (RHDH) catalog-import function. This issue leads to the leakage of GitLab access tokens on the frontend when the base64 encoded token contains a newline at its end. The sanitized error message, including the raw access token, may be displayed on the frontend. An attacker, upon obtaining the token, could exploit it to push malicious code to repositories, delete resources in Git, revoke or generate new keys, and illegitimately sign code.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Linuxfoundation Backstage
Affected Vendors
- Linux Foundation
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
Note: This is just a basic overview providing quick insights into CVE-2023-6944 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions