CVE-2023-1825

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-1825
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1825.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1825
Aliases
Published
2023-06-07T00:00:00Z
Modified
2025-12-05T00:36:48.676452Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Insertion of Sensitive Information Into Sent Data in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. It was possible to disclose issue notes to an unauthorized user at project export.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1825.json",
    "cna_assigner": "GitLab",
    "cwe_ids": [
        "CWE-201"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
bbf6efd2bedaef0d5c2112998a2a34534cc740bb
Fixed
9ec5f337f9fecb932051eca4d24744475f25870e
Database specific 
{
    "versions": [
        {
            "introduced": "15.7"
        },
        {
            "fixed": "15.10.8"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
4dce6bc3728f63bc9086ff3088cda7527f6f0bec
Fixed
a81364cc950ad7396dbe403a87bb398d52ca9994
Database specific 
{
    "versions": [
        {
            "introduced": "15.11"
        },
        {
            "fixed": "15.11.7"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
280a09dbca836a6eedf5da1e63953fe8da44bf4c
Fixed
a1daac1686c9dad556b2fa9324f107fb72eae066
Database specific 
{
    "versions": [
        {
            "introduced": "16.0"
        },
        {
            "fixed": "16.0.2"
        }
    ]
}

Affected versions

v15.*

v15.11.0-ee
v15.11.1-ee
v15.11.2-ee
v15.11.3-ee
v15.11.4-ee
v15.11.5-ee
v15.11.6-ee

v16.*

v16.0.0-ee
v16.0.1-ee