CVE-2023-5332

High

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor.…

GitLab·NVD-CWE-noinfo·Published 2023-12-04

CVSS

8.1

EPSS

0.01

KEV

Exploits

cve.orgen

217 chars

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.

NVDen

217 chars

NVDes

257 chars

El parche en la librería de terceros Consul requiere que 'enable-script-checks' esté configurado en False. Esto fue necesario para habilitar un parche por parte del proveedor. Sin esta configuración, se podría omitir el parche. Esto sólo afecta a GitLab-EE.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	5.9	—	—	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
3.1	Secondary	NVD	5.9	0.7	5.2	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N