---
id: CVE-2023-5831
title: Insertion of Sensitive Information Into Sent Data in GitLab
summary: >-
  An issue has been discovered in GitLab CE/EE affecting all versions starting
  from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and
  all versions starting from 16.5.0 before 16.5.1 which have the
  `super_sidebar_logged…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-201
vendor: GitLab
product: GitLab
affected:
  - GitLab >= 16.0 < 16.3.6
  - GitLab >= 16.4 < 16.4.2
  - GitLab >= 16.5 < 16.5.1
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2024-08-29T20:48:15.446663Z'
published: '2023-11-06'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T04:16:58.558Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-5831'
references:
  - url: 'https://gitlab.com/gitlab-org/gitlab/-/issues/428919'
    label: 'GitLab Issue #428919'
tags:
  - cve.org
epss: 0.0046
epssPercentile: 0.38281
ingestedAt: '2026-10-15T01:08:04.253Z'
---

## Overview

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.

## Affected

- `GitLab >= 16.0 < 16.3.6`
- `GitLab >= 16.4 < 16.4.2`
- `GitLab >= 16.5 < 16.5.1`

## Remediation

Upgrade to version 16.3.6, 16.4.1, 16.5.1. Risk can also be mitigated by disabling the default-disabled `super_sidebar_logged_out` feature flag if it was previously enabled.