CVE-2023-1710

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1710
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1710.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-1710
Aliases
Downstream
Published
2023-04-05T00:00:00Z
Modified
2025-11-28T02:34:27.742446Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 allows an attacker to view the count of internal notes for a given issue.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1710.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3b397c1753233301037d0ca3caae23ce116505d3
Fixed
b46679ba4f4f80f63501a36d605e4691090384f4
Database specific 
{
    "versions": [
        {
            "introduced": "15.0"
        },
        {
            "fixed": "15.8.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b107c0bae0871a67dee31ad8e52550d32c4afb66
Fixed
901fa64918978ff660504cbc5cbb154c069b7160
Database specific 
{
    "versions": [
        {
            "introduced": "15.9"
        },
        {
            "fixed": "15.9.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
defe6e7f8821c58e67a2e909ef8d36463d76e7e8
Fixed
36dd7c9b36a66d9dec664a8a0925818c13fc33c8
Database specific 
{
    "versions": [
        {
            "introduced": "15.10"
        },
        {
            "fixed": "15.10.1"
        }
    ]
}

Affected versions

v15.*

v15.10.0-ee
v15.9.0-ee
v15.9.1-ee
v15.9.2-ee
v15.9.3-ee

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1710.json"