GitLab < 16.6.6, 16.7 < 16.7.4, 16.8 < 16.8.1 - Unauthorized User Email Exposure via Tags Feed
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-5612.
PoCs published by mad3E7cat, TopskiyPavelQwertyGang, n00bhaxor, erruquill, including Metasploit module auxiliary/gather/gitlab_tags_rss_feed_email_disclosure.
AI-analyzed exploit summary The repository provides a detailed writeup and proof-of-concept for CVE-2023-5612, an information disclosure vulnerability in GitLab. It explains how unauthenticated users can retrieve user email addresses via the tags RSS feed, even when email visibility is disabled in user profiles.
Description
An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
Exploits (3)
The repository provides a detailed writeup and proof-of-concept for CVE-2023-5612, an information disclosure vulnerability in GitLab. It explains how unauthenticated users can retrieve user email addresses via the tags RSS feed, even when email visibility is disabled in user profiles.
This repository provides a detailed writeup and NSE scripts for exploiting CVE-2023-5612, an SSRF vulnerability in GitLab CE/EE. It includes manual PoC steps, NSE scripts for verification and brute-forcing, and mitigation recommendations.
This Metasploit module exploits an information disclosure vulnerability in GitLab (CVE-2023-5612) by querying the tags RSS feed to retrieve user email addresses even when visibility is disabled in the user profile. It supports targeting specific projects or scraping all projects via the API.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N