Описание
An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitlab | fixed | 15.10.8+ds1-2 | package |
EPSS
Процентиль: 36%
0.00156
Низкий
Связанные уязвимости
CVSS3: 2.4
ubuntu
почти 5 лет назад
An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.
CVSS3: 2.4
nvd
почти 5 лет назад
An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.
github
почти 4 года назад
An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.
EPSS
Процентиль: 36%
0.00156
Низкий