CyberRota Analysis
AI-GeneratedGitLab versions from 10.1.0 to before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 are vulnerable to improper authorization checks, potentially allowing authenticated users to access sensitive credentials and tokens without proper proxy transit. This could lead to unauthorized data exposure and compromise of sensitive information. Organizations using affected GitLab versions should prioritize remediation to mitigate the risk of credential leakage.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to improper authorization checks on internal data emission endpoints.