CVE-2021-22224 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	High
Remote	Yes
Type	Cross-site request forgery
Description	A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before version 14.0.2 allowed an attacker to call mutations as the victim.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2125	gitlab	14.0.1-1	14.0.3-1	High	Fixed

Date	Advisory	Group	Package	Severity	Type
06 Jul 2021	ASA-202107-18	AVG-2125	gitlab	High	multiple issues

References
https://gitlab.com/gitlab-org/gitlab/-/issues/324397 https://hackerone.com/reports/1122408 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22224.json