Vulnerability DatabaseCVE-2023-1098
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2023-1098
Published:April 05, 2023
Updated:August 02, 2026
An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration.
Related Resources (5)
https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1098.json
https://gitlab.com/gitlab-org/gitlab/-/issues/383745
https://hackerone.com/reports/1784294
https://nvd.nist.gov/vuln/detail/CVE-2023-1098
https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1098.json
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
HIGH
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
HIGH
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Exposure of Information Through Shell Error Message
CWE-535
EPSS
Base Score:
0.94