CVE-2023-1098
First published: Wed Apr 05 2023(Updated: )
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab | >=11.5.0<15.8.5 | |
| GitLab | >=11.5.0<15.8.5 | |
| GitLab | >=15.9.0<15.9.4 | |
| GitLab | >=15.9.0<15.9.4 | |
| GitLab | =15.10.0 | |
| GitLab | =15.10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-1098?
CVE-2023-1098 has been classified as an information disclosure vulnerability affecting multiple versions of GitLab.
How do I fix CVE-2023-1098?
To fix CVE-2023-1098, upgrade your GitLab installation to version 15.8.5 or higher, 15.9.4 or higher, or 15.10.1 or higher.
Which versions of GitLab are affected by CVE-2023-1098?
CVE-2023-1098 affects all GitLab versions starting from 11.5 up to but not including 15.8.5, as well as specific ranges of 15.9 and 15.10 versions.
What kind of information is leaked by CVE-2023-1098?
CVE-2023-1098 allows an admin to leak passwords from a repository mirror configuration.
Who is primarily affected by CVE-2023-1098?
Admins of GitLab installations that are on the affected versions are primarily impacted by CVE-2023-1098.
- agent/type
- agent/references
- agent/author
- agent/description
- agent/severity
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/source
- agent/tags
- vendor/gitlab
- canonical/gitlab
- version/gitlab/11.5.0
- version/gitlab/15.9.0
- version/gitlab/15.10.0