CVE-2021-22224

A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call…

High · published July 7, 2021

CVSS v3.1
7.1
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01023 · 63.2th percentile
Published
2021-07-07T11:26Z
EPSS history
Timeline
  • 07 JUL 11:26Z
    A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call…
    cvelistv5