CVE-2020-10953
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.
Original description
The description as published by the source.
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"11.7.0"},{"fixed":"12.9.1"}]}]
References
- advisory about.gitlab.com
- advisory about.gitlab.com
- web nvd.nist.gov