Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2023-5356

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.

  • Published: Jan 12, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-5356
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.3
  • AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 16.7.0 16.7.0.x
gitlab / gitlab 16.7.1 16.7.1.x
gitlab / gitlab 16.6.0 16.6.4
gitlab / gitlab 8.13.0 16.5.6