Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-3060

Description

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests

POC

Reference

- https://gitlab.com/gitlab-org/gitlab/-/issues/365427

Github

No PoCs found on GitHub currently.