CVE-2023-5612 json
Missing Authorization in GitLab
published 2y ago modified 2mo ago also BIT-gitlab-2023-5612 , EUVD-2023-57905
- cvss
- 5.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.9%
- EPSS 4.9% chance of exploitation in 30 days, percentile 92%
- public exploits
- 1
- Metasploit
Summary
An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
Patch / fix
- bitnami gitlab 16.6.6, 16.7.4, 16.8.1
- GitLab GitLab 16.6.6, 16.7.4, 16.8.1
Is CVE-2023-5612 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerTimeline
- First public exploit (Metasploit auxiliary/gather/gitlab_tags_rss_feed_email_disclosure)
- Published
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2y ago
Exploit prediction
4.87% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-14).
Exploits and checks
- Metasploit auxiliary/gather/gitlab_tags_rss_feed_email_disclosure GitLab Tags RSS feed email disclosure metasploit auxiliary, normal rank, 2024-01-25
- hackerone.com https://hackerone.com/reports/2208790 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| OSV | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | gitlab | <16.6.6 >=16.7.0, <16.7.4 >=16.8.0, <16.8.1 |
16.6.6 16.7.4 16.8.1 |
Affected products
- GitLab GitLab
Classification
- Weakness
-
- CWE-862 Missing Authorization
- Technology feeds
References
-
hackerone.com
/reports/2208790
technical-description, exploit, permissions-required, broken-link, web
-
about.gitlab.com
/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/
vendor-advisory, advisory
-
gitlab.com
/gitlab-org/gitlab/-/issues/428441
issue-tracking, permissions-required, broken-link, web
-
nvd.nist.gov
/vuln/detail/CVE-2023-5612
web
Sources
- CVE List CVE-2023-5612
- NVD CVE-2023-5612
- OSV BIT-gitlab-2023-5612
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Enhance with deb and rpm package type records.