CVE-2023-0326 MEDIUM

CVE-2023-0326

Vendor Gitlab
Product GitLab DAST API scanner
Published March 27, 2023
Last update February 19, 2025
View on NVD All CVEs

CVSS base score

5.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.

Key dates

02Disclosure timeline

March 27, 2023 CVE published
February 19, 2025 Record updated