← All advisories

Unrated severityOSV Advisory· Published Mar 26, 2019· Updated Aug 5, 2024

CVE-2018-19856

CVE-2018-19856

Description

GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

GitLab Inc./GitLabOSV
Range: v1.2.0, v1.2.0pre, v1.2.1, …
GitLab Inc./CE/EEllm-fuzzy
Range: before 11.3.12, 11.4.x before 11.4.10, 11.5.x before 11.5.3
osv-coords4 versions
pkg:apk/chainguard/gitlab-operator pkg:apk/chainguard/gitlab-operator-charts pkg:apk/chainguard/gitlab-operator-compat pkg:apk/chainguard/gitlab-operator-fips
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

2

about.gitlab.com/2018/12/06/critical-security-release-gitlab-11-dot-5-dot-3-released/mitrex_refsource_CONFIRM
gitlab.com/gitlab-org/gitlab-ce/issues/54857mitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.