CVE-2022-0244
An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due...
Original description
The description as published by the source.
An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"14.5.0"},{"fixed":"14.5.3"},{"introduced":"14.6.0"},{"fixed":"14.6.2"}]}]
References
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov