CyberRota Analysis
AI-GeneratedGitLab versions from 12.3 to 19.1.8, as well as 19.2 prior to 19.2.6 and 19.3 prior to 19.3.2, are vulnerable to a remote code execution flaw that can be exploited by authenticated users through a specially crafted Git project export. This vulnerability arises from a buffer overflow in the Unicode conversion process during Advanced Search indexing, potentially allowing attackers to execute arbitrary code on the server. Organizations using affected GitLab versions should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code execution by importing a specially crafted Git project export to overflow the Unicode conversion buffer used in Advanced Search indexing.