CVE-2023-5600: Missing Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. Arbitrary access to the titles of an private specific references could be leaked through the service-desk custom email template.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5600?
CVE-2023-5600 has been classified as a medium severity vulnerability.
How do I fix CVE-2023-5600?
To address CVE-2023-5600, users should upgrade to GitLab EE version 16.3.6 or later, 16.4.2 or later, or 16.5.1.
What types of software are affected by CVE-2023-5600?
CVE-2023-5600 affects GitLab EE versions from 16.0 to 16.3.6, from 16.4 to 16.4.2, and from 16.5 to 16.5.1.
What is the potential impact of CVE-2023-5600?
CVE-2023-5600 may allow unauthorized access to private references' titles, leading to information disclosure.
How can I determine if my GitLab EE version is vulnerable to CVE-2023-5600?
To check for vulnerability, verify if your GitLab EE version is between 16.0 and 16.5.1, excluding the patched versions.