Vulnerability Description
An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | < 16.4.4 |
Related Weaknesses (CWE)
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/431345Broken Link
- https://hackerone.com/reports/2237165Permissions Required
- https://gitlab.com/gitlab-org/gitlab/-/issues/431345Broken Link
- https://hackerone.com/reports/2237165Permissions Required
FAQ
What is CVE-2023-6051?
CVE-2023-6051 is a vulnerability with a CVSS score of 5.7 (MEDIUM). An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be c...
How severe is CVE-2023-6051?
CVE-2023-6051 has been rated MEDIUM with a CVSS base score of 5.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-6051?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.