CVE-2023-5831

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 200

Summary

CVE-2023-5831 is a vulnerability affecting GitLab CE/EE versions starting from 16.0 before 16.3.6, 16.4 before 16.4.2, and 16.5.0 before 16.5.1. These versions with the `super_sidebar_logged_out` feature flag enabled may inadvertently reveal GitLab version metadata to unauthorized actors. This issue could potentially enable attackers to determine which GitLab versions are being used, increasing the risk of targeted attacks. It is crucial for these versions to be updated to their respective patched versions to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share