Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, remote code execution, cross-site scripting, data manipulation and security restriction bypass on the targeted system.
Information Disclosure
Security Restriction Bypass
System / Technologies affected
GitLab Community Edition (CE) versions prior to 19.4.2, 19.3.5, 19.2.8
GitLab Enterprise Edition (EE) versions prior to 19.4.2, 19.3.5, 19.2.8
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
