CVE-2023-1178

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1178
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1178.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1178
Aliases
Downstream
Published
2023-05-03T00:00:00Z
Modified
2026-04-10T04:55:14.017778Z
Severity
  • 5.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a release containing a ref to another commit.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1178.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
14ad7803a5cf70e2777ac4d9ce2e33da6eb312ab
Fixed
85a92396626cc698a65afd57df80298d3439fb87
Database specific 
{
    "versions": [
        {
            "introduced": "8.6"
        },
        {
            "fixed": "15.9.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
defe6e7f8821c58e67a2e909ef8d36463d76e7e8
Fixed
979ce9cea3e92eb0714de8ff4f6ae98488b03175
Database specific 
{
    "versions": [
        {
            "introduced": "15.10"
        },
        {
            "fixed": "15.10.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
4dce6bc3728f63bc9086ff3088cda7527f6f0bec
Fixed
59859b264764a06096c15459ea93f581515f112e
Database specific 
{
    "versions": [
        {
            "introduced": "15.11"
        },
        {
            "fixed": "15.11.1"
        }
    ]
}

Affected versions

v15.*
v15.10.0-ee
v15.10.2-ee
v15.10.3-ee
v15.10.4-ee
v15.11.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1178.json"