CVE-2023-1974: Exposure of Sensitive Information Through Metadata

April 11, 2023

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

References

github.com/advisories/GHSA-8jg3-rx43-3fv4
github.com/answerdev/answer/commit/ac3f2f047ee00b4edaea7530e570ab67ff87cd6a
huntr.dev/bounties/852781c6-9cc8-4d25-9336-bf3cb8ee3439
nvd.nist.gov/vuln/detail/CVE-2023-1974

Code Behaviors & Features

Detect and mitigate CVE-2023-1974 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →