CVE-2018-20144 — Path Traversal in Gitlab

CWE-22 — Path Traversal4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 52.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GitlabDebian Gitlab
Timeline
PublishedMar 28
Latest updateMay 13

Description

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDgitlab/gitlab11.0.0 — 11.3.13+2
▶debiandebian/gitlab< gitlab 11.5.4+dfsg-1 (sid)
▶gitlabgitlab/gitlab

🔴Vulnerability Details

1
GHSA
GHSA-2xj7-mfw6-mfvm: GitLab Community and Enterprise Edition 11↗2022-05-13
▶

📋Vendor Advisories

2
GitLab
CVE-2018-20144: GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.↗2019-03-28
▶
Debian
CVE-2018-20144: gitlab - GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4....↗2018
▶