An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-04-02
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.
CVSS Score
9.6
EPSS Score
0.031
Published
2021-04-02
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.
CVSS Score
9.9
EPSS Score
0.131
Published
2021-03-24
Page 51