Lucene search
NgalogH1:415238HistorySep 27, 2018 - 10:33 a.m.
GitLab: [Admin Panel] CSRF to resume/pause runner
2018-09-2710:33:53
ngalog
hackerone.com
15
0.001 Low
EPSS
Percentile
28.1%
Hi,
Just found a CSRF in admin panel of gitlab instance to pause/resume runner.
Steps to reproduce
- http://{gitlab_instance}/admin/runners/:runner_id/resume
- http://{gitlab_instance}/admin/runners/:runner_id/pause
Video:
███████
password: ██████████
Impact
Just found a CSRF in admin panel of gitlab instance to pause/resume runner.
Related
osv
osv
CVE-2020-13350
2020-11-17 18:15:12
BIT-gitlab-2020-13350
2024-03-06 11:21:36
nvd
nvd
CVE-2020-13350
2020-11-17 18:15:12
cve
cve
CVE-2020-13350
2020-11-17 18:15:12
nessus
nessus
GitLab < 13.3.9 (CVE-2020-13350)
2024-05-17 00:00:00
ubuntucve
ubuntucve
CVE-2020-13350
2020-11-17 00:00:00
cvelist
cvelist
CVE-2020-13350
2020-11-17 17:55:43
prion
prion
Cross site request forgery (csrf)
2020-11-17 18:15:00
debiancve
debiancve
CVE-2020-13350
2020-11-17 18:15:12
freebsd
freebsd
Gitlab -- Multiple vulnerabilities
2020-11-02 00:00:00