CVE-2023-5963

Summary

CVE-2023-5963 is a denial-of-service vulnerability affecting GitLab Enterprise Edition (EE) versions 13.9 to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1. The Advanced Search function in GitLab EE is susceptible to this issue, which arises from an improper handling of syntax operators. Attackers can exploit this vulnerability by chaining an excessive number of syntax operators in a search query, leading to a denial-of-service condition. The exact cause of the vulnerability lies in the way the application processes and validates complex search queries.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.