CVE-2023-6944

CVE-2023-6944 is a medium-severity vulnerability affecting Red Hat Developer Hub and Linux Foundation Backstage. It allows for the leakage of GitLab access tokens on the frontend if a base64 encoded token contains a newline character, potentially exposing the raw token in sanitized error messages. An attacker could exploit this to gain unauthorized access to GitLab repositories, enabling actions like pushing malicious code or deleting resources. While the vulnerability has a CVSS score of 5.7, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.