Improper authorization in GitLab Pages included with...
Moderate severity
Unreviewed
Published
Apr 5, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Apr 4, 2022
Published to the GitHub Advisory Database
Apr 5, 2022
Last updated
Jan 27, 2023
Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to steal a user's access token on an attacker-controlled private GitLab Pages website and reuse that token on the victim's other private websites
References