CVE-2023-1178

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a release containing a ref to another commit.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-11795.4A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected isCVE-2023-11806.1A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected CVE-2023-11815.4Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.CVE-2023-11835.5A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where thCVE-2023-11848.8A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionaCVE-2023-11858.8A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New ProCVE-2023-11865.5A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the CVE-2023-11875.5A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown procCVE-2023-11885.5A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0xCVE-2023-11895.5A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability isCVE-2023-11907.8A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functCVE-2023-11917.2A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java
CVE-2023-1178: Medium severity, CVSS 5.7 | Vulnix