Lucene search

K
osvGoogleOSV:BIT-GITLAB-2021-22224
HistoryMar 06, 2024 - 11:19 a.m.

BIT-gitlab-2021-22224

2024-03-0611:19:41
Google
osv.dev
6
gitlab
cross-site request forgery
graphql
api
vulnerability
13.12
13.12.6
14.0.2
attacker
mutations

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%