CVE-2023-7045

Cross-Site Request Forgery (CSRF) in GitLab

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (KAS).

Existe una vulnerabilidad CSRF en GitLab CE/EE desde las versiones 13.11 anteriores a 16.10.6, desde 16.11 anteriores a 16.11.3, desde 17.0 anteriores a 17.0.1. Al aprovechar esta vulnerabilidad, un atacante podría filtrar tokens anti-CSRF a través del servidor de agentes de Kubernetes (KAS).

*Credits: Thanks [imrerad](https://hackerone.com/imrerad) for reporting this vulnerability through our HackerOne bug bounty program

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-12-21 CVE Reserved
2024-05-23 CVE Published
2024-09-18 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-352: Cross-Site Request Forgery (CSRF)

CAPEC

References (0)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
GitLab Search vendor "GitLab"		GitLab Search vendor "GitLab" for product "GitLab"				>= 13.11.0 < 16.10.6 Search vendor "GitLab" for product "GitLab" and version " >= 13.11.0 < 16.10.6"		en		Affected
GitLab Search vendor "GitLab"		GitLab Search vendor "GitLab" for product "GitLab"				>= 16.11.0 < 16.11.3 Search vendor "GitLab" for product "GitLab" and version " >= 16.11.0 < 16.11.3"		en		Affected
GitLab Search vendor "GitLab"		GitLab Search vendor "GitLab" for product "GitLab"				>= 17.0.0 < 17.0.1 Search vendor "GitLab" for product "GitLab" and version " >= 17.0.0 < 17.0.1"		en		Affected