[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYhkYwaPNKjq0fww_lKVTbugbH9tYvE7OoD2ghtArzUE":3,"g5a-risk:CVE-2023-6944":127},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":28,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":51,"references":52,"referencesCount":69,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":28,"otxData":28,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":122,"notableEvents":123},"CVE-2023-6944","What is CVE-2023-6944?","A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.","A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab t...","2024-01-04T10:15:11.517","2026-06-17T06:51:44.317",5.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":35,"CVSSMetricV2":36,"CVSSMetricV40":37},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","REQUIRED","UNCHANGED","HIGH","NONE","MEDIUM",null,2.1,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},[],[],[],0.00561,[38,38,38,38,38,38,38],"Medium",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","red_hat_developer_hub","*","cpe:2.3:a:redhat:red_hat_developer_hub:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":45,"criteria":50,"vulnerable":4},"linuxfoundation","backstage","cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*",2,[53,57,61,65,67],{"url":54,"source":55,"tags":56},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2024:5869","Red Hat",[],{"url":58,"source":55,"tags":59},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2023-6944",[60],"Vendor Advisory",{"url":62,"source":55,"tags":63},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2255204",[64,60],"Issue Tracking",{"url":58,"source":55,"tags":66},[60],{"url":62,"source":55,"tags":68},[64,60],5,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-209","Generation of Error Message Containing Sensitive Information","The product generates an error message that includes sensitive information about its environment, users, or associated data.","The sensitive information may be valuable information on its own (such as a password), or it may be useful for launching other, more serious attacks. The error message may be created in different ways:\nAn attacker may use the contents of error messages to help launch another, more focused attack. For example, an attempt to exploit a path traversal weakness (CWE-22) might yield the full pathname of the installed application. In turn, this could be used to select the proper number of \"..\" sequences to navigate to the targeted file. An attack using SQL injection (CWE-89) might not initially succeed, but an error message could reveal the malformed query, which would expose query logic and possibly even passwords or other sensitive information used within the query.","Draft","Base","Simple",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2023-6944? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-6944, a medium severity cyber security vulnerability from 2024. A flaw was found in the Red Hat Developer Hub (RHDH). The ...","CVE-2023-6944, CVE-2023-6944 vulnerability, CVE-2023-6944 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, redhat security, linuxfoundation security, red_hat_developer_hub vulnerability, backstage vulnerability","\u002Fwhat-is\u002Fcve-2023-6944",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-6944","Cybersecurity","CVE-2023-6944, CVE-2023-6944 vulnerability, CVE-2023-6944 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108,116],{"Operator":28,"Negate":28,"Nodes":109},[110],{"Operator":111,"Negate":80,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":114,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":115,"VersionEndIncluding":28},"03D5A3A5-63FC-42D4-BF87-4B2B466EDB3F","1.21.0",{"Operator":28,"Negate":28,"Nodes":117},[118],{"Operator":111,"Negate":80,"CPEMatch":119},[120],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":121,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":115,"VersionEndIncluding":28},"9DD9C33C-E29A-4DFF-9C5A-CA2A87D0B6C1",[],[],{"lastModified":11,"cacheTime":125,"version":126},1792437194868,"2.0",{"score":128,"band":129,"action":130,"scoredAt":131},20,"Low","Monitor","2026-10-16T07:00:21.063102+00:00"]