CVE-2022-4138
A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"1.0.0"},{"fixed":"15.6.7"},{"introduced":"15.7.0"},{"fixed":"15.7.6"},{"introduced":"15.8.0"},{"fixed":"15.8.1"}]}]
Références
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov