Cross-Site Request Forgery

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the vic…CVE-2021-22224GitLab · CVSS 7.1 · 1.0% likely

   CWE-352

2. Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a use…CVE-2022-0427GitLab · CVSS 7.7 · 0.8% likely

   CWE-352

3. CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected version…CVE-2020-13350GitLab · CVSS 3.1 · 0.8% likely

   CWE-352

4. An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 b…CVE-2022-0154GitLab · CVSS 7.5 · 0.6% likely

   CWE-352

5. An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API.CVE-2021-22202GitLab · CVSS 2.4 · 0.5% likely

   CWE-352

6. A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starti…CVE-2022-4138GitLab · CVSS 6.4 · 0.4% likely

   CWE-352

7. An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.1…CVE-2023-1965GitLab · CVSS 6.8 · 0.4% likely

   CWE-352

8. Cross-Site Request Forgery (CSRF) in GitLabCVE-2024-4994GitLab · CVSS 8.1 · 0.4% likely

   CWE-352

9. Cross-Site Request Forgery (CSRF) in GitLabCVE-2024-4597GitLab · CVSS 5.7 · 0.3% likely

   CWE-352

10. Cross-Site Request Forgery (CSRF) in GitLabCVE-2024-1211GitLab · CVSS 6.4 · 0.3% likely

    CWE-352

11. Cross-Site Request Forgery (CSRF) in GitLabCVE-2023-7045GitLab · CVSS 5.4 · 0.3% likely

    CWE-352

12. Cross-Site Request Forgery (CSRF) in GitLabCVE-2026-4922GitLab · CVSS 8.1 · 0.3% likely

    CWE-352

13. Cross-Site Request Forgery (CSRF) in GitLabCVE-2026-3857GitLab · CVSS 8.1 · 0.2% likely

    CWE-352

14. Cross-Site Request Forgery (CSRF) in GitLabCVE-2026-19650GitLab · CVSS 7.1 · 0.2% likelycovered by CyberSIXT

    CWE-3524 articles

15. Cross-Site Request Forgery (CSRF) in GitLabCVE-2026-4527GitLab · CVSS 6.5 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.