An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data from Sentry logs via the GRPC::Unknown exception.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | * | 11.1.7 (excluding) |
| Gitlab | Gitlab | 11.2.0 (including) | 11.2.4 (excluding) |
| Gitlab | Gitlab | 11.3.0 (including) | 11.3.0 (including) |
| Gitlab | Ubuntu | upstream | * |