Analysis Summary

CVE-2023-5117 CVSS:3.7

GitLab could allow a remote attacker to obtain sensitive information, caused by incompatible policies. By using a direct link to the uploaded file URL, an attacker could exploit this vulnerability to obtain sensitive information.

CVE-2024-10043 CVSS:3.1

GitLab could allow a remote authenticated attacker to obtain sensitive information. By sending a specially crafted request, an attacker could exploit this vulnerability to view confidential incident title through the Wiki History Diff feature.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2023-5117

• CVE-2024-10043

Affected Vendors

Remediation

Upgrade to the latest version of GitLab, available from the GitLab Website.

CVE-2023-5117

CVE-2024-10043