CVE-2023-2233 Information

Description

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8 all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner’s Sentry instance projects.

Reference

https://gitlab.com/gitlab-org/gitlab/-/issues/408359 https://hackerone.com/reports/1947211