Gitlab

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gitlab records in CISA KEV

No Gitlab vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2023-15092 CVE-2023-31485 · GHSA-c2v8-3552-rp4m

LOW 27

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00651 Published 2023-04-28 No fix listed CWE-295