CVE-2023-5356: GitLab

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.

Affected products

• GitLab GitLab: from 8.13.0, before 16.5.6 (fixed in 16.5.6); from 16.6.0, before 16.6.4 (fixed in 16.6.4); version 16.7.0 only; version 16.7.1 only

Published 2024-01-12. Last modified 2026-06-17.