Описание
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.
Ссылки
- Vendor Advisory
- Issue TrackingVendor Advisory
- ExploitIssue TrackingThird Party Advisory
- Vendor Advisory
- Issue TrackingVendor Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Одно из
EPSS
9.6 Critical
CVSS3
6.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
Связанные уязвимости
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.
An issue has been discovered in GitLab CE/EE affecting all versions st ...
An issue has been discovered in GitLab CE/EE affecting all versions starting with 13.11, 13.12 and 14.0. A specially crafted design image allowed attackers to read arbitrary files on the server.
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS
9.6 Critical
CVSS3
6.4 Medium
CVSS3
3.5 Low
CVSS2