CVE-2021-22224
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker...
Original description
The description as published by the source.
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.12.0"},{"fixed":"13.12.6"},{"introduced":"14.0.0"},{"fixed":"14.0.2"}]}]
References
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov