Beveiligingsadvies

CVE-2022-0427

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-28 18:53:05

Laatst bijgewerkt 2024-08-02 23:25:40

Toegewezen door GitLab

CVSS-score 7.7

Status PUBLISHED

Beschrijving

Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover

← Alle CVE's bekijken Bekijk op cve.org ↗