CVE-2023-1178

2023-05-0300:00:00

ubuntu.com

cve-2023-1178

file integrity compromise

source code

installation packages

tag

release

ref

unix

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

40.1%

JSON

An issue has been discovered in GitLab CE/EE affecting all versions from
8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all
versions starting from 15.11 before 15.11.1. File integrity may be
compromised when source code or installation packages are pulled from a tag
or from a release containing a ref to another commit.