GitLab Multiple Vulnerabilities

Release Date: 18 Jan 2021 3055 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in GitLab, a remote attacker could exploit some of these vulnerabilities to trigger information disclosure and bypass security restriction on the targeted system.

Impact

Information Disclosure
Security Restriction Bypass

System / Technologies affected

Versions prior to 13.7.4, 13.6.5 and 13.5.7 for GitLab Community Edition (CE) and Enterprise Edition (EE)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

The vendor has issued a fix:
https://about.gitlab.com/releases/2021/01/14/critical-security-release-gitlab-13-7-4-released/

Vulnerability Identifier

No CVE information is available

Source

GitLab
AusCERT