Security Advisory

CVE-2023-31485

5.9
MEDIUM

Vulnerability Description

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.
Published Date April 29, 2023
Official Source NIST NVD Advisory