Threats tagged 'ghsa-mfcp-rjv7-385m'

A vulnerability in GitLab CE/EE versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 could allow unauthorized users to view confidential branch names by accessing project issues with related merge requests. This information disclosure flaw has a medium severity score of 4.3 CVSS v3.1. No public exploits or known active exploitation have been reported.