Lucene search

K
osvGoogleOSV:BIT-GITLAB-2021-22171
HistoryMar 06, 2024 - 11:20 a.m.

BIT-gitlab-2021-22171

2024-03-0611:20:38
Google
osv.dev
2
gitlab pages
api token
authentication parameters

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim’s API token if they click on a maliciously crafted link

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%