CVSS 3.1 Score 3.7 of 10 (low)


Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 200


CVE-2023-5831 is a vulnerability discovered in GitLab CE/EE that affects all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 with the super_sidebar_logged_out feature flag enabled. This vulnerability can unintentionally disclose GitLab version metadata to unauthorized actors. It has a risk score of 26 and a base severity of LOW according to the CVSS:3.1 rating. The exploitability score is 2.2, and it requires no privileges or user interaction, with an attack vector through the network and no impact on integrity or availability but low confidentiality impact. No remediation steps are provided in the information available for this vulnerability, but organizations using affected versions of GitLab should be aware of the potential danger posed by unauthorized access to version metadata.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5831 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options