Missing Authorization in GitLab
CVE-2023-5612 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit, 2 repository PoCs, and 1 lab environment.
An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
| Product | Source | Version range | Status |
|---|---|---|---|
GitLabBrowse GitLab / GitLabDefault status: unaffected, unknown | CVE List | Before 16.6.6 | affected |
| 16.7 to < 16.7.4 | affected | ||
| 16.8 to < 16.8.1 | affected |
A technical writeup describing CVE-2023-5612, an information disclosure vulnerability in GitLab that leaks user emails via the tags RSS feed. The document explains the vulnerability, provides HTTP request/response examples, and references external exploit code (Metasploit module, NSE script) but does not contain its own executable exploit or scanner code.
No backdoor observed in reviewed code
The supplied evidence is a payload withheld documentation file describing the CVE-2023-5612 vulnerability in GitLab. It contains no executable code, no instructions to run a PoC, and no concealed or deceptive payload. The file explains the vulnerability, provides example HTTP requests and responses, and references external tools (Metasploit, NSE script) for exploitation, but does not itself perform any actions.
The artifact is a payload withheld file that explains the vulnerability, provides manual steps and example HTTP interactions, and references external exploit code. It does not contain any executable code itself; it is a technical analysis and documentation, i.e., a writeup.
README.md:1-211README.md:13README.md:30-67README.md:69-87README.md:139-171README.md:1-211This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
A single-service Docker Compose environment running GitLab CE 16.5.10, intended as a vulnerable target for CVE-2023-5612 email disclosure testing.
docker-compose.yml:1-19README.md:1-211The README explicitly describes CVE-2023-5612, provides a vulnerable GitLab version (16.5.10), and includes a docker-compose.yml to set up the target for exploitation and testing.
README.md:1-10README.md:60-80GitLab CE 16.5.10 service exposed on host ports 8929, 443, and 2424, with persistent volumes for config, logs, and data. It is the target for CVE-2023-5612 email disclosure via tags RSS feed.
docker-compose.yml:2-18README.md:60-80Supported by supplied evidence
The README describes the vulnerability (email disclosure via tags RSS feed), references the official GitLab advisory and NVD entry, and provides a vulnerable version (16.5.10) and exploit steps that match the CVE description.
README.md:1-10README.md:60-80README.md:12-30README.md:82-84docker-compose.yml:2-12README.md:82-84README.md:85-88README.md:90-95README.md:97-100README.md:55-58README.md:82-84README.md:85-86README.md:90-95README.md:90-95README.md:97-100README.md:55-58README.md:101-120The environment is a self-contained vulnerability lab targeting a local GitLab instance. No evidence of host escape, external connections, persistence, credential theft, or destructive behavior beyond the intended exploit demonstration.
docker-compose.yml:1-19README.md:1-211This review is limited to the supplied lab evidence packet. It does not assert that the environment runs, reproduces a vulnerability, or is safe to execute. Contract: eip-docker-lab-analysis-v1.