CVE-2023-2030 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

EPSS 0.04% · 13.7th percentile

Risk Scores

EPSS Score
0.04%
13.7th percentile

Affected Products

VendorProductVersions
Bitnamigitlab16.6.0, 12.2.0, 16.7.0
Bitnamigitlab12.2.0, 16.6.0, 16.7.0

Timeline

References

Open in Interactive Console →