Threats tagged 'bit-gitlab-2024-4597'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.3%	CVE-2024-4597GitLab · Cross-Site Request Forgery (CSRF) MediumEPSS 0.3%2024-05-24GCVE DatabaseCVE-2024-4597 A Cross-Site Request Forgery (CSRF) vulnerability exists in GitLab Enterprise Edition that affects certain versions from 16.7 up to but not including 16.9.7, 16.10 up to but not including 16.10.5, and 16.11 up to but not including 16.11.2. This flaw allows an attacker to force a user with an active SAML session to approve a merge request without their consent. EPSS 0.3%Vulnerability #bit-gitlab-2024-4597 #bitnami	GCVE Database	2024-05-24

Page 1 of 1