CVE-2023-5332CWE-1395

Dependency on Vulnerable Third-Party Component in GitLab

Medium · published December 4, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00872 · 58.5th percentile
Weakness
CWE-1395 · Dependency on Vulnerable Third-Party Component
Published
2023-12-04T06:30Z
EPSS history
Timeline
  • 04 DEC 06:30Z
    Dependency on Vulnerable Third-Party Component in GitLab
    cvelistv5