CVE-2018-14603 in Community Edition
Summary
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
07/26/2018
Disclosure
07/26/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 122237 | GitLab Community Edition/Enterprise Edition Test Feature cross-site request forgery | 352 | Not defined | Official fix | CVE-2018-14603 |