CVE-2023-5963

CVSS 3.1 Score 3.1 of 10 (low)

Details

Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 20

Summary

CVE-2023-5963 is a vulnerability that affects GitLab EE with Advanced Search versions 13.9 to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1. This vulnerability allows for a denial of service in the Advanced Search function by exploiting excessive syntax operators. The affected products include various versions of GitLab EE and GitLab CE. To remediate the vulnerability, organizations should update their GitLab instances to versions 16.4.2 or later for 16.x releases and version 14.x.y for the latest supported major release series (e.g., version 14.x.y). This vulnerability has a risk score of 5 and a base severity rating of LOW according to the CVSS v3 scoring system, indicating its potential danger is relatively low but still requires attention from organizations using affected GitLab versions in order to prevent possible denial of service attacks on their systems.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5963 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options