CVE-2023-5831: GitLab

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

Affected products

• GitLab GitLab: from 16.0.0, before 16.3.6 (fixed in 16.3.6); from 16.4.0, before 16.4.2 (fixed in 16.4.2); version 16.5.0 only

Published 2023-11-06. Last modified 2026-06-17.