CVE-2023-6159

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a `Cargo.toml` containing maliciously crafted input.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

Vendor	Product	Versions
GitLab	GitLab	>= 12.7, < 16.6.6; >= 16.7, < 16.7.4; >= 16.8, < 16.8.1

References

https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/431924Broken Link
https://hackerone.com/reports/2251278Permissions Required
https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/431924Broken Link
https://hackerone.com/reports/2251278Permissions Required

Timeline

Published: Jan 26, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-61606.7The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions up to, and includin CVE-2023-61616.1The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to CVE-2023-61634.8The WP Crowdfunding WordPress plugin before 2.1.10 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2023-61644.8The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘new CVE-2023-61654.8The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings, which could allow CVE-2023-61666.1The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cro CVE-2023-61739.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeoSOFT Software TeoBASE allows SQL In CVE-2023-61746.5SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file CVE-2023-61757.8NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file CVE-2023-61764.7A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occu CVE-2023-61786.5An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus CVE-2023-61797.8Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) att