CVE-2024-2434
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Original description
The description as published by the source.
An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.9.0"},{"fixed":"16.9.6"},{"introduced":"16.10.0"},{"fixed":"16.10.4"},{"introduced":"16.11.0"},{"fixed":"16.11.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2024-2434 gitlab
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com