CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v3.1

5.0 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS

0.80% chance of exploitation in the next 30 days, 54th percentile

Published

2023-03-27

Updated

2025-02-19

Proof-of-concept exploits (1)

• https://gitlab.com/gitlab-org/gitlab/-/issues/388132

References

• CVE Record
• NVD entry

Related

• CVE-2023-0324
• CVE-2023-0328
• CVE-2023-0323
• CVE-2023-0329
• CVE-2023-0321
• CVE-2023-0331