An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.
References
Link | Resource |
---|---|
https://gitlab.com/gitlab-org/gitlab/-/issues/407252 | Broken Link |
https://hackerone.com/reports/1929929 | Permissions Required |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitLab
Published: 2024-01-12T13:57:06.694Z
Updated: 2024-01-12T13:57:06.694Z
Reserved: 2023-04-13T18:20:57.328Z
Link: CVE-2023-2030
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-12T14:15:47.833
Modified: 2024-01-18T21:18:39.847
Link: CVE-2023-2030
JSON object: View
Redhat Information
No data.
CWE