GitLab has a missing CSRF protection that allows an unauthenticated attacker to craft a special link and trigger the creation of a Jira subscription on behalf of a targeted user's namespace. This flaw enables the addition of JIRA integrations without the owner’s consent, giving the attacker the ability to establish an unauthorized connection to the user’s JIRA environment.

All GitLab Community and Enterprise Edition releases from 11.10 through 18.8, 18.9 up to but excluding 18.9.7, 18.10 up to 18.10.5, and 18.11 up to 18.11.2 are affected. The vulnerability is present in every build prior to the specified patched versions, regardless of downstream customizations.

The CVSS score of 6.5 indicates a moderate severity; no EPSS score is available and the flaw is not listed in CISA’s KEV catalog. Exploitation requires only that a victim click a malicious link, so the attack vector is web‑based and remote. The lack of physical or local privileges emphasizes the need for defensive measures, though the risk level remains moderate compared to higher‑severity threats.