GitLab Multiple Vulnerabilities

Release Date: 28 Feb 2022 5677 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure, security restriction bypass and remote code execution on the targeted system.

Impact

Denial of Service
Information Disclosure
Security Restriction Bypass
Remote Code Execution

System / Technologies affected

GitLab Community Edition (CE) versions prior to 14.8.2, 14.7.4 and 14.6.5
GitLab Enterprise Edition (EE) versions prior to 14.8.2, 14.7.4 and 14.6.5
GitLab Omnibus prior to 14.8

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

The vendor has issued a fix
https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/

Vulnerability Identifier

Source

GitLab