CVE-2018-14364

GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and r...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory about.gitlab.com
report gitlab.com
report hackerone.com