CVE-2023-5356

Published: Jan 12, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.

Affected (8)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	16.6.0 ≤ version < 16.6.4
Gitlab Gitlab	8.13.0 ≤ version < 16.5.6
Gitlab Gitlab	16.6.0 ≤ version < 16.6.4
Gitlab Gitlab	8.13.0 ≤ version < 16.5.6
Gitlab Gitlab	Version 16.7.0
Gitlab Gitlab	Version 16.7.0
Gitlab Gitlab	Version 16.7.1
Gitlab Gitlab	Version 16.7.1