GitLab CE/EE contained a vulnerability affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2. Under specific conditions, an authenticated user could create a repository where the displayed content in the web interface did not match the content available for download. This discrepancy arises from improper handling of Git reference name resolution, potentially misleading users about repository contents. The vulnerability affects Ubuntu 16.04 LTS packages including versions =8.4.3+dfsg-9, =8.4.3+dfsg-12, and =8.5.8+dfsg-5. No patch links or vendor advisories were provided in the data, and no known exploits have been reported.

The vulnerability allows an authenticated user to create a repository with inconsistent content presentation between the web interface and downloadable data. This could lead to misinformation or confusion about repository contents, potentially impacting integrity perception. There is no indication of confidentiality or availability impact. No known exploitation in the wild has been reported.

The vulnerability has been remediated in GitLab CE/EE versions 18.11.7, 19.0.4, and 19.1.2 and later. Users should upgrade to these fixed versions or later to address the issue. Since no official patch links or vendor advisories are provided, users should consult the official GitLab release notes or Ubuntu security advisories for the appropriate updates. Patch status is not yet confirmed in the provided data — check the vendor advisory for current remediation guidance.