CVE-2023-7045 - Cross-Site Request Forgery (CSRF) in GitLab

Back Back to CVE browser

MEDIUM

Cross-Site Request Forgery (CSRF) in GitLab

Published May 23, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (KAS).

Affected products

Vendor GitLab Product GitLab Default
unaffected
- Version
  13.11
  Status
  affected
  Constraints
  <16.10.6
- Version
  16.11
  Status
  affected
  Constraints
  <16.11.3
- Version
  17.0
  Status
  affected
  Constraints
  <17.0.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

unaffected

Version	Status	Constraints
13.11	affected	<16.10.6
16.11	affected	<16.11.3
17.0	affected	<17.0.1

Remediation

Vendor solution

Upgrade to versions 16.10.6, 16.11.3, 17.0.1 or above.

Weaknesses (1)

CWE-352

CSRF

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59232
Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/436358
issue-trackingpermissions-requiredExploitIssue Tracking
https://hackerone.com/reports/2286823
technical-descriptionexploitpermissions-requiredPermissions Required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59232		Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/436358		issue-trackingpermissions-requiredExploitIssue Tracking
https://hackerone.com/reports/2286823		technical-descriptionexploitpermissions-requiredPermissions Required