Description
Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | >=11.5.0, <13.5.6, >=13.6.0, <13.6.4, >=13.7.0, <13.7.2 | — |
Advisories 1
- WID-SEC-2024-1809 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2024