CVE-2023-2181

MEDIUM · CVSS 6.3 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-05-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-2181

Severity

MEDIUM

CVSS

6.3

EPSS

0.73%

GitLab

Original NVD Description

An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. A malicious developer could use a git feature called refs/replace to smuggle content into a merge request which would not be visible during review in the UI.