CVE-2023-2001

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jun 7, 2023
Updated: Jan 7, 2025
CWE ID 89

Summary

CVE-2023-2001 is a vulnerability affecting GitLab CE and EE versions before 15.10.8, 15.11.x before 15.11.7, and 16.0.x before 16.0.2. This issue enables attackers to spoof protected tags, potentially persuading victims to download malicious code. The impact could lead to serious security consequences, making it crucial for users to update their GitLab instances as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Cisco Unified Communications Manager

Affected Vendors

  • Cisco Systems Inc