CVE-2023-5995

creationtimestamp| type| source ---|---|--- 2023-12-21 18:48:31+00:00| seen| https://t.me/ctinow/157875 2025-05-22 04:44:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17245...

GitLab 16.2 < 16.4.3 / 16.5 < 16.5.3 / 16.6 < 16.6.1 (CVE-2023-5995)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was...

CVE-2023-5995 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects...

CVE-2023-5995 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects...

CVE-2023-5995

Removed by vendor...

CVE-2023-5995

Concisely, CVE-2023-5995 affects GitLab Enterprise Edition (EE) versions 16.2–16.4.3, 16.5–16.5.3, and 16.6–16.6.1, where a vulnerability allows an attacker to abuse the policy bot and gain access to internal projects. The issue stems from improper handling of policy bot interactions, enabling un...

CVE-2023-5995

An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects...