A vulnerability in GitLab EE/CE versions from 15.10 up to but not including 17.1.7, from 17.2 up to but not including 17.2.5, and from 17.3 up to but not including 17.3.2 allows disclosure of user passwords from repository mirror configuration through error messages.