CVE-2023-31485

Published April 29th, 2023

View on NVD ↗

CVSS v3

5.9

MEDIUM

CVSS v2

N/A

Affected

2

PROJECTS

Description

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.

bluefeet/GitLab-API-v4

A complete GitLab API v4 client.

GitHub

20

chansen/p5-http-tiny

Tiny HTTP Client

GitHub

53