← Vulnerability feed

Vulnerability record · CVE-2023-6944 · published 4 January 2024

CVE-2023-6944: Redhat red hat developer hub error message information leak vulnerability

Redhat · Red Hat Developer Hub

A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.

5.7 CVSS 3.1 Medium EPSS 0.56% · top 55.6% CWE-209 · Error message information leak
5.7CVSS 3.1 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/errata/RHBA-2024:5869
https://access.redhat.com/security/cve/CVE-2023-6944 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255204 Issue TrackingVendor Advisory
https://access.redhat.com/security/cve/CVE-2023-6944 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255204 Issue TrackingVendor Advisory

Track CVE-2023-6944 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2023-35926Linuxfoundation backstage code injection vulnerabilityBackstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox…EPSS 1.9%8.8CVE-2026-25153Linuxfoundation backstage code injection vulnerabilityBackstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDo…EPSS 0.62%8.5CVE-2021-43783Linuxfoundation backstage path traversal vulnerability@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor with write a…EPSS 1.2%6.5CVE-2026-25152Linuxfoundation backstage path traversal vulnerabilityBackstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDo…EPSS 0.44%6.5CVE-2024-45815Linuxfoundation backstage prototype pollution vulnerabilityBackstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog b…EPSS 0.51%6.5CVE-2024-45816Linuxfoundation backstage relative path traversal vulnerabilityBackstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access co…EPSS 0.73%6.5CVE-2021-32662Linuxfoundation backstage path traversal vulnerabilityBackstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In `@back…EPSS 1.3%5.4CVE-2024-46976Linuxfoundation backstage cross-site scripting vulnerabilityBackstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to in…EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2023-6944), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.