Medium severity5.3NVD Advisory· Published Mar 9, 2023· Updated Jun 17, 2026
CVE-2023-0223
CVE-2023-0223
Description
An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Non-project members could retrieve release descriptions via the API, even if the release visibility is restricted to project members only in the project settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=15.5.0,<15.7.8
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.5.0,<15.7.8
- (no CPE)range: starting from 15.5 before 15.7.8, starting from 15.8 before 15.8.4, starting from 15.9 before 15.9.2
- (no CPE)range: >=15.5, <15.7.8
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0223.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/387870nvdBroken Link
- hackerone.com/reports/1824226nvdPermissions Required
News mentions
0No linked articles in our index yet.