CVE-2021-22202 | Severity.io

Description

An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.

Related CPE's

gitlab

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22202.json

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/26017

Broken Link

https://hackerone.com/reports/471274

Permissions RequiredThird Party Advisory

Weaknesses

[email protected]

Primary

CWE-352

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.3 · Medium

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-04-02T17:15:13.007

4 years ago

Last modified

2021-04-07T19:01:48.483

4 years ago