CVE-2023-5117: Exposure of Sensitive Information Due to Incompatible Policies in GitLab
3.7
CVSS
Description
An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL.
Classification
CVE ID: CVE-2023-5117
CVSS Base Severity: LOW
CVSS Base Score: 3.7
Affected Products
Vendor: GitLab
Product: GitLab
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)