Description
An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 15.2 – < 17.4.6, 17.5 – < 17.5.4, 17.6 – < 17.6.2 | 17.4.6 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | gitlab | No fix yet | — |
Advisories 2
- NCSC-2024-0490 Kwetsbaarheden verholpen in GitLab NCSC-NL (Netherlands) · Dec 13, 2024
- WID-SEC-2024-3683 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 10, 2024
References
- GitLab Issue #486051 issue-tracking permissions-required
- HackerOne Bug Bounty Report #2666341 technical-description exploit permissions-required