CoreCVE
Back

HIGH

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1

Published Feb 13, 2023

Description

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitLab
Published Feb 13, 2023
Updated Mar 21, 2025
Reserved Nov 24, 2022
Link CVE-2022-4138

CISA Vulnrichment

Updated Mar 21, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-4138

Red Hat

No data

ENISA EUVD

Assigner GitLab
Published Feb 13, 2023
Updated Mar 21, 2025
Link EUVD-2022-51500

GitHub

No data