Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-5831

Опубликовано: 06 нояб. 2023
Источник: nvd
CVSS3: 3.7
CVSS3: 5.3
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the super_sidebar_logged_out feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.0.0 (включая) до 16.3.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.0.0 (включая) до 16.3.6 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.4.0 (включая) до 16.4.2 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.4.0 (включая) до 16.4.2 (исключая)
cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:16.5.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 23%
0.00076
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-201
NVD-CWE-noinfo

Связанные уязвимости

ubuntu логотип

CVE-2023-5831

CVSS3: 3.7
ubuntu
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

debian логотип

CVE-2023-5831

CVSS3: 3.7
debian
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

github логотип

GHSA-53xh-mr6w-445f

CVSS3: 3.7
github
больше 2 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

EPSS

Процентиль: 23%
0.00076
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-201
NVD-CWE-noinfo