Vulnerability — CVE-2023-5612

CVE-2023-5612

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-5612
Description:: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled.
Last updated date:: 10/03/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/06/2024
Reference url to background: https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlab_tags_rss_feed_email_disclosure.rb