GitLab 13.12.0-13.12.5 - Cross-Site Request Forgery via GraphQL API
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim