CVE-2024-2434
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Résumé
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.9.0"},{"fixed":"16.9.6"},{"introduced":"16.10.0"},{"fixed":"16.10.4"},{"introduced":"16.11.0"},{"fixed":"16.11.1"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2024-2434 gitlab
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com