BIT-gitlab-2023-1178

vendorUSosv

view advisory published 2024-03-06Licence: per source

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a release containing a ref to another commit.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-1178US	medium5.7	0.89% (59th)	—	2023-05-03
An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1178.jsonADVISORY
https://gitlab.com/gitlab-org/gitlab/-/issues/381815WEB
https://hackerone.com/reports/1778009ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-1178WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan