VULNERABILITY INTELLIGENCE

CVE-2023-31485

CVSS score5.9 MEDIUM

EPSS probability0.65%

CISA KEVNot currently listed

Published2023-04-29

Last modified2026-06-17

Description

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.