CVE-2023-5831
CVSS 3.1 Score 3.7 of 10 (low)
Details
Summary
CVE-2023-5831 is a vulnerability discovered in GitLab CE/EE that affects all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 with the `super_sidebar_logged_out` feature flag enabled. This vulnerability can unintentionally disclose GitLab version metadata to unauthorized actors. It has a risk score of 26 and a base severity of LOW according to the CVSS:3.1 rating. The exploitability score is 2.2, and it requires no privileges or user interaction, with an attack vector through the network and no impact on integrity or availability but low confidentiality impact. No remediation steps are provided in the information available for this vulnerability, but organizations using affected versions of GitLab should be aware of the potential danger posed by unauthorized access to version metadata.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions