admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-2177.md
0xMarcio 7e8cbc97be Update CVE sources 2024-08-13 18:35
2024-08-13 18:35:37 +00:00

832 B
Raw Blame History

CVE-2024-2177

Description

A Cross Window Forgery vulnerability exists within GitLab CE/EE affecting all versions from 16.3 prior to 16.11.5, 17.0 prior to 17.0.3, and 17.1 prior to 17.1.1. This condition allows for an attacker to abuse the OAuth authentication flow via a crafted payload.

POC

Reference

Github

No PoCs found on GitHub currently.