CVE-2023-5963

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-5963
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5963.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-5963
Aliases
Published
2023-11-06T12:18:56.276Z
Modified
2025-12-05T04:08:47.579768Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Allocation of Resources Without Limits or Throttling in GitLab
Details

An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5963.json",
    "cwe_ids": [
        "CWE-770"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
a1a60e9f753f4e99f2b13b24028a6092a897cc06
Fixed
128862473d18a7df991090bb25688a8c81fcb0fe
Database specific 
{
    "versions": [
        {
            "introduced": "13.9"
        },
        {
            "fixed": "16.3.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
e4c1c182610739c1b1d10a8eacbea1f5aa837ad6
Fixed
385b9a2727ad972efe1fcdca3a61c447329ecd09
Database specific 
{
    "versions": [
        {
            "introduced": "16.4.0"
        },
        {
            "fixed": "16.4.2"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
fc87c9d4cca1536abcf902b4128f5c2004d87162
Fixed
55da9ccb652fcf67641114264ecded0dab88f4dc
Database specific 
{
    "versions": [
        {
            "introduced": "16.5.0"
        },
        {
            "fixed": "16.5.1"
        }
    ]
}

Affected versions

v16.*

v16.4.0-ee
v16.4.1-ee
v16.5.0-ee