CyberRota Analysis
AI-GeneratedGitLab versions prior to 19.0.6, 19.1.4, and 19.2.2 are vulnerable to a path traversal flaw in the package registry, which could enable authenticated users to execute arbitrary code remotely. This high-severity vulnerability poses a significant risk to the integrity and security of affected systems. Organizations using these versions should prioritize immediate updates to mitigate the potential for exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package registry.
Related CVEs
Other vulnerabilities affecting the same vendor(s)