CyberRota Analysis
AI-GeneratedGitLab versions prior to 18.11.11, 19.0.8, 19.1.6, and 19.2.4 are vulnerable to improper request validation in GraphQL multiplex query handling, potentially allowing unauthenticated users to execute mutations via GET requests. This vulnerability poses a high risk as it could lead to unauthorized data manipulation and system compromise. Organizations using affected versions of GitLab should prioritize remediation to mitigate potential security breaches.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling.
Related CVEs
Other vulnerabilities affecting the same vendor(s)