CVE-2021-22224
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.12.0"},{"fixed":"13.12.6"},{"introduced":"14.0.0"},{"fixed":"14.0.2"}]}]
Références
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov