CVE-2023-6051

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v3.1

5.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

EPSS

0.63% chance of exploitation in the next 30 days, 48th percentile

Published

2023-12-15

Updated

2025-11-20

Proof-of-concept exploits (1)

• https://hackerone.com/reports/2237165

References

• CVE Record
• NVD entry

Related

• CVE-2023-6050
• CVE-2023-6052
• CVE-2023-6049
• CVE-2023-6053
• CVE-2023-6048
• CVE-2023-6054