Threats tagged 'bit-gitlab-2026-3857'

A Cross-Site Request Forgery (CSRF) vulnerability in GitLab CE/EE allows unauthenticated users to execute arbitrary GraphQL mutations on behalf of authenticated users. This issue affects GitLab versions from 17.10 up to but not including 18.8.7, 18.9 up to but not including 18.9.3, and 18.10 up to but not including 18.10.1. The vulnerability is due to insufficient CSRF protection. A patch is available that addresses this issue.