Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incorrect Synchronization in GitLab
Vulnerability Description
An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. A maintainer could obtain a Dependency Proxy password by editing a certain Dependency Proxy setting.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
不正确的同步机制
Vulnerability Title
GitLab EE 安全漏洞
Vulnerability Description
GitLab Enterprise Edition（EE）是美国GitLab公司的一套内容管理系统。 GitLab EE存在安全漏洞，该漏洞源于存在信息泄露问题，维护者可以通过编辑某个依赖代理设置来获取依赖代理密码。
CVSS Information
N/A
Vulnerability Type
N/A