CVE-2023-7045: 
GitLab vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in GitLab CE/EE affecting versions from 13.11 before 16.10.6, from 16.11 before 16.11.3, and from 17.0 before 17.0.1. The vulnerability was assigned CVE-2023-7045 and was disclosed on May 23, 2024. This security flaw allows attackers to exfiltrate anti-CSRF tokens through the Kubernetes Agent Server (KAS) (NVD, GitLab Issue).

The vulnerability is classified as a Cross-Site Request Forgery (CWE-352) with a CVSS v3.1 base score of 6.1 (Medium) according to NIST NVD assessment. GitLab Inc. assigned a slightly lower CVSS score of 5.4 (Medium). The attack vector is network-based (AV:N) with low attack complexity (AC:L), requiring user interaction (UI:R) and affecting changed scope (S:C) with low confidentiality and integrity impacts (NVD).

When successfully exploited, this vulnerability allows attackers to exfiltrate anti-CSRF tokens via the Kubernetes Agent Server, potentially leading to unauthorized cross-site requests. The impact primarily affects the confidentiality and integrity of the system, with no direct impact on availability (NVD).

The vulnerability requires network access and user interaction to exploit. Proof of concept exploits have been documented in the GitLab issue tracker and HackerOne report, indicating that the vulnerability is exploitable in practice (GitLab Issue, HackerOne Report).

GitLab has addressed this vulnerability by releasing patched versions: 16.10.6, 16.11.3, and 17.0.1. Users are advised to upgrade to these or later versions to mitigate the risk. The fix was released on May 22, 2024 (NVD).