EUVD-2023-35790

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GitLab API versions up to 0.26 lack TLS certificate verification, risking machine-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 14
CNNVD	GitLab 信任管理问题漏洞	29 Apr 202300:00	–	cnnvd
CVE	CVE-2023-31485	28 Apr 202300:00	–	cve
Cvelist	CVE-2023-31485	28 Apr 202300:00	–	cvelist
Debian CVE	CVE-2023-31485	28 Apr 202300:00	–	debiancve
NVD	CVE-2023-31485	29 Apr 202300:15	–	nvd
OSV	DEBIAN-CVE-2023-31485	29 Apr 202300:15	–	osv
OSV	UBUNTU-CVE-2023-31485	29 Apr 202300:15	–	osv
Prion	Code injection	29 Apr 202300:15	–	prion
Positive Technologies	PT-2023-23360 · Gitlab +1 · Gitlab::Api::V4 +1	28 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-31485	9 Jan 202612:32	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "9165a342-2786-3533-8fd5-c9658b6f7437",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "bb01e11c-f6ad-33c2-aae8-ddb8032d2b50",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
blog	www.blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
openwall	www.openwall.com/lists/oss-security/2023/04/18/14
github	www.github.com/bluefeet/GitLab-API-v4/pull/57
github	www.github.com/chansen/p5-http-tiny/pull/151
openwall	www.openwall.com/lists/oss-security/2023/04/29/1
openwall	www.openwall.com/lists/oss-security/2023/05/03/3
openwall	www.openwall.com/lists/oss-security/2023/05/03/5
openwall	www.openwall.com/lists/oss-security/2023/05/07/2

03 Oct 2025 20:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.9

EPSS0.00355

SSVC