CVE-2018-20229 — Path Traversal in Gitlab

CWE-22 — Path Traversal4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 82.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GitlabDebian Gitlab
Timeline
PublishedApr 4
Latest updateMay 14

Description

GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDgitlab/gitlab11.4.0 — 11.4.12+2
▶debiandebian/gitlab< gitlab 11.5.5+dfsg-1 (sid)
▶gitlabgitlab/gitlab

🔴Vulnerability Details

1
GHSA
GHSA-fvw3-2rq4-x8qv: GitLab Community and Enterprise Edition before 11↗2022-05-14
▶

📋Vendor Advisories

2
GitLab
CVE-2018-20229: GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.↗2019-04-04
▶
Debian
CVE-2018-20229: gitlab - GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, a...↗2018
▶