CVE-2023-7045 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-7045 PUBLISHED

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (KAS).

EPSS 0.14% · 34.2th percentile

Risk Scores

EPSS Score

0.14%

34.2th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	13.11.0, 16.11.0, 17.0.0
Bitnami	gitlab	13.11.0, 16.11.0, 17.0.0

Timeline

Jan 21, 1970 Security Advisory
May 21, 2024 CVE Published
May 24, 2024 EPSS Score
Jun 17, 2024 EPSS Score
Jul 10, 2024 EPSS Score
Aug 2, 2024 EPSS Score
Aug 25, 2024 EPSS Score
Sep 17, 2024 EPSS Score
Oct 5, 2024 Coalition ESS Score
Oct 10, 2024 EPSS Score
Nov 2, 2024 EPSS Score
Nov 25, 2024 EPSS Score

References

Open in Interactive Console →