CVE-2023-2030CWE-347

Improper Verification of Cryptographic Signature in GitLab

Low · published January 12, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-01-12T13:57Z
EPSS history
Timeline
  • 12 JAN 13:57Z
    Improper Verification of Cryptographic Signature in GitLab
    cvelistv5