GitLab CE/EE Confidential Issue Title and Description Disclosure Vulnerability

A vulnerability exists in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 14.0 prior to 16.9.7, 16.10 prior to 16.10.5, and 16.11 prior to 16.11.2. This vulnerability allows unauthorized users to access the titles and descriptions of confidential issues from public projects through the user interface.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of confidential issue details, including titles and descriptions, from public projects.

Remediation

Users are advised to upgrade to GitLab versions 16.11.2, 16.10.5, or 16.9.7, all of which include the necessary patch. Instructions for updating GitLab can be found on the GitLab update page.