VDB

CVE-2023-5600

CVE-2023-5600 PUBLISHED CVSS 3.0999999046325684 LOW

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. Arbitrary access to the titles of an private specific references could be leaked through the service-desk custom email template.

EPSS 0.27% · 17.8th percentile

Risk Scores

CVSS 3.1
3.0999999046325684
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.27%
17.8th percentile

Affected Products

VendorProductVersions
Bitnamigitlab16.0.0, 16.5.0, 16.4.0
Bitnamigitlab16.0.0, 16.4.0, 16.5.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Oct 31, 2023 CVE Published
  • Jun 20, 2025 Coalition ESS Score
  • Jun 20, 2025 PoC Published
  • Jun 20, 2025 PoC Published
  • Jun 21, 2025 EPSS Score
  • Jun 23, 2025 Coalition ESS Score
  • Jul 2, 2025 EPSS Score
  • Jul 12, 2025 EPSS Score
  • Jul 23, 2025 EPSS Score
  • Aug 2, 2025 EPSS Score
  • Aug 12, 2025 Coalition ESS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›