vulnerability

Gitlab Gitlab: CVE-2023-5512: Improper Control of Generation of Code

Severity
5
CVSS
(AV:N/AC:H/Au:S/C:N/I:C/A:N)
Published
Dec 15, 2023
Added
Apr 22, 2025
Modified
Sep 18, 2025

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect representation in the UI.

Solution

gitlab-gitlab-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.