CVE-2023-5933

CVSS 3.1: 5.4 medium
EPSS: <1%p50
Published: Jan 26, 2024 · Jan 26, 2024
Modified: Jun 17, 2026

Analyze CVE-2023-5933 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.

Vendors: gitlab

Products: gitlab

Weakness: CWE-80, CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Self-managed GitLab installations should be patched again (CVE-2024-0402)

Help Net SecurityJan 30, 00:00 UTC · Jan 30, 2024VulnerabilityCVE-2024-0402 CVE-2023-5933 CVE-2023-5612+23 · 1 read