Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GitLab 日志信息泄露漏洞
Vulnerability Description
GitLab是美国GitLab公司的一款使用Ruby on Rails开发的、自托管的、Git（版本控制系统）项目仓库应用程序。该程序可用于查阅项目的文件内容、提交历史、Bug列表等。 GitLab(社区版和企业版) 8.0版本至11.x版本(1.3.11版本已修复)、11.4.8之前的11.4版本和11.5.1之前的11.5版本中存在安全漏洞，该漏洞源于程序将访问令牌记录到Workhorse日志中。攻击者可利用利用该漏洞查看其他用户的令牌。
CVSS Information
N/A
Vulnerability Type
N/A