CVE-2023-5061
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 15, 2023
Updated: Dec 19, 2023
CWE ID 276
Summary
CVE-2023-5061 is a vulnerability affecting multiple versions of GitLab, including those between 9.3 and 16.4.4, 16.5 and 16.5.4, and 16.6 and 16.6.2. In these versions, developers could potentially manipulate predefined Continuous Integration (CI) variables using the REST API, posing a security risk. This issue could lead to unintended consequences in the CI pipeline. GitLab has released patches to address this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share