vulnerability
FreeBSD: VID-3b14b2b4-9014-11ee-98b3-001b217b3468 (CVE-2023-5995): Gitlab -- Vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:M/C:C/I:N/A:N) | Dec 1, 2023 | Dec 2, 2023 | Dec 10, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:M/C:C/I:N/A:N)
Published
Dec 1, 2023
Added
Dec 2, 2023
Modified
Dec 10, 2025
Description
Gitlab reports: XSS and ReDoS in Markdown via Banzai pipeline of Jira Members with admin_group_member custom permission can add members with higher role Release Description visible in public projects despite release set as project members only through atom response Manipulate the repository content in the UI (CVE-2023-3401 bypass) External user can abuse policy bot to gain access to internal projects Client-side DOS via Mermaid Flowchart Developers can update pipeline schedules to use protected branches even if they don't have permission to merge Users can install Composer packages from public projects even when Package registry is turned off Unauthorized member can gain Allowed to push and merge access and affect integrity of protected branches Guest users can react (emojis) on confidential work items which they cant see in a project
Solution
freebsd-upgrade-package-gitlab-ce
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.