{"id":87186,"date":"2026-07-13T12:46:50","date_gmt":"2026-07-13T12:46:50","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2023-5356-gitlab-ce-ee-incorrect-authorization-check-that-enables-unauthorized-slash-command-execution","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-5356-gitlab-ce-ee-incorrect-authorization-check-that-enables-unauthorized-slash-command-execution\/","title":{"rendered":"CVE-2023-5356: GitLab CE\/EE Incorrect Authorization Check that Enables Unauthorized Slash Command Execution<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2023-5356 is a severe vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE), which may lead to unauthorized command execution and potential system compromise. It arises from improper authorization checks in multiple versions of GitLab CE\/EE, allowing users to exploit slack\/mattermost integrations and execute slash commands as different users. This vulnerability is critical as it could lead to data leakage or complete system compromise if exploited.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-5356
\nSeverity: High (CVSS: 7.3)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Unauthorized command execution as a different user leading to potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n