VULNERABILITY INTELLIGENCE

CVE-2023-5612

CVSS score5.3 MEDIUM
EPSS probability4.87%
CISA KEVNot currently listed
Published2024-01-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.

Weakness classification

  • cve@gitlab.com: CWE-862
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references