CVE-2023-7045

MEDIUM 6.1CVE-2023-7045 · Published 23/05/2024 · updated 17/06/2026

In short

CVE-2023-7045 is a MEDIUM (CVSS 6.1) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.1% of all vulnerabilities.
Fix: update to 16.10.6, 16.11.3 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`= 17.0.0≥ 13.11.0, < 16.10.6≥ 16.11.0, < 16.11.3`	`16.10.616.11.3`

Description

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (KAS).

References

gitlab.com/gitlab-org/gitlab/-/issues/436358 · Exploit
hackerone.com/reports/2286823 · Permissions Required

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

= 17.0.0≥ 13.11.0, < 16.10.6≥ 16.11.0, < 16.11.3

16.10.616.11.3

More vulnerabilities in gitlab

See all →