CVE-2023-5061

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Dec 15, 2023
Updated: Dec 19, 2023
CWE ID 285

Summary

CVE-2023-5061 is a vulnerability that affects all versions of GitLab starting from 9.3 before 16.4.4, 16.5 before 16.5.4, and 16.6 before 16.6.2. The vulnerability allows developers to override predefined CI variables through the REST API in certain situations. The risk score is 5, indicating a medium severity level. The exploitability score is 2.8, with low privileges required and no user interaction necessary for the attack to occur. The attack vector is through the network, and the impact on confidentiality is none, while the integrity impact is low. Remediation measures should be taken to address this vulnerability in affected versions of GitLab to prevent unauthorized access and potential exploitation by attackers targeting an organization's GitLab environment.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5061 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options