Cross-Site Request Forgery (CSRF) in GitLab (CVE-2024-4597)
A Cross-Site Request Forgery (CSRF) vulnerability exists in GitLab Enterprise Edition that affects certain versions from 16.7 up to but not including 16.9.7, 16.10 up to but not including 16.10.5, and 16.11 up to but not including 16.11.2. This flaw allows an attacker to force a user with an active SAML session to approve a merge request without their consent.
AI Analysis
Technical Summary
CVE-2024-4597 is a CSRF vulnerability in GitLab EE that impacts versions >=16.7.0 <16.9.7, >=16.10.0 <16.10.5, and >=16.11.0 <16.11.2. An attacker can exploit this issue to coerce a user authenticated via SAML into approving a merge request, potentially bypassing intended user interaction and authorization controls. This vulnerability requires the victim to have an active SAML session, and the attack leverages CSRF techniques to perform unauthorized actions.
Potential Impact
An attacker may cause a user with an active SAML session to unknowingly approve a merge request, which could lead to unauthorized code changes being merged. This undermines the integrity of the code review and approval process within affected GitLab instances.
Mitigation Recommendations
A patch is available for this vulnerability. Users should upgrade affected GitLab EE versions to 16.9.7 or later for the 16.7 branch, 16.10.5 or later for the 16.10 branch, and 16.11.2 or later for the 16.11 branch to remediate this issue. Applying these updates will prevent exploitation of the CSRF vulnerability.
Cross-Site Request Forgery (CSRF) in GitLab (CVE-2024-4597)
Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in GitLab Enterprise Edition that affects certain versions from 16.7 up to but not including 16.9.7, 16.10 up to but not including 16.10.5, and 16.11 up to but not including 16.11.2. This flaw allows an attacker to force a user with an active SAML session to approve a merge request without their consent.
Affected software
pkg:bitnami/gitlabRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-4597 is a CSRF vulnerability in GitLab EE that impacts versions >=16.7.0 <16.9.7, >=16.10.0 <16.10.5, and >=16.11.0 <16.11.2. An attacker can exploit this issue to coerce a user authenticated via SAML into approving a merge request, potentially bypassing intended user interaction and authorization controls. This vulnerability requires the victim to have an active SAML session, and the attack leverages CSRF techniques to perform unauthorized actions.
Potential Impact
An attacker may cause a user with an active SAML session to unknowingly approve a merge request, which could lead to unauthorized code changes being merged. This undermines the integrity of the code review and approval process within affected GitLab instances.
Mitigation Recommendations
A patch is available for this vulnerability. Users should upgrade affected GitLab EE versions to 16.9.7 or later for the 16.7 branch, 16.10.5 or later for the 16.10 branch, and 16.11.2 or later for the 16.11 branch to remediate this issue. Applying these updates will prevent exploitation of the CSRF vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BIT-gitlab-2024-4597
- Osv Schema Version
- 1.5.0
- Aliases
- ["CVE-2024-4597"]
- Ecosystems
- ["Bitnami"]
- Database Specific Severity
- Medium
Threat ID: 6aa329a391cc7f3848d1c53b
Added to database: 09/10/2026, 22:05:23 UTC
Last enriched: 09/10/2026, 22:34:11 UTC
Last updated: 09/11/2026, 03:13:22 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.