Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2023-2030

CVSS 3.1
5.3 medium
EPSS
<1%p32
Published
·
Modified
Analyze CVE-2023-2030 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

Vendors
gitlab
Products
gitlab
Weakness
CWE-347
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

2 stories