Lucene search

K
osvGoogleOSV:BIT-GITLAB-2021-22202
HistoryMar 06, 2024 - 11:20 a.m.

BIT-gitlab-2021-22202

2024-03-0611:20:04
Google
osv.dev
4
gitlab
csrf
system hooks
api
security issue
admin

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

CPENameOperatorVersion
gitlablt13.10.0

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%