{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:16:11.503","vulnerabilities":[{"cve":{"id":"CVE-2023-5332","sourceIdentifier":"cve@gitlab.com","published":"2023-12-04T07:15:07.120","lastModified":"2026-06-17T06:48:21.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE."},{"lang":"es","value":"El parche en la librería de terceros Consul requiere que 'enable-script-checks' esté configurado en False. Esto fue necesario para habilitar un parche por parte del proveedor. Sin esta configuración, se podría omitir el parche. Esto sólo afecta a GitLab-EE."}],"affected":[{"source":"cve@gitlab.com","affectedData":[{"vendor":"GitLab","product":"GitLab","defaultStatus":"unaffected","cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"repo":"git://git@gitlab.com:gitlab-org/gitlab.git","versions":[{"version":"9.5.0","lessThan":"16.2.8","versionType":"semver","status":"affected"},{"version":"16.3.0","lessThan":"16.3.5","versionType":"semver","status":"affected"},{"version":"16.4","lessThan":"16.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"9.5.0","versionEndExcluding":"16.2.8","matchCriteriaId":"D2A9F08F-3E67-4BAF-98E5-C211E320BD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.3.0","versionEndExcluding":"16.3.5","matchCriteriaId":"CC5696C9-592A-4D50-B5BB-9A250DAB6589"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:16.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"6696C987-61C1-462E-8A73-016F9902BC67"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*","versionEndExcluding":"0.9.4","matchCriteriaId":"59CB68FA-DFE8-4C80-8FB4-A6E86FF4DE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"58A2918F-9880-4605-8DC2-090513DE6337"},{"vulnerable":true,"criteria":"cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.4","matchCriteriaId":"951274EA-0268-4AC9-9561-F47045BE21AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hashicorp:consul:1.1.0:*:*:*:-:*:*:*","matchCriteriaId":"8D61FF58-9664-400A-9E78-B20132C5E5CF"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8171","source":"cve@gitlab.com","tags":["Exploit","Issue Tracking"]},{"url":"https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations","source":"cve@gitlab.com","tags":["Patch","Vendor Advisory"]},{"url":"https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}