Threats tagged 'bit-gitlab-2024-2434'

GitLab versions 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 contain a path traversal vulnerability. This flaw allows an attacker to bypass pathname restrictions, potentially leading to denial of service (DoS) and unauthorized reading of restricted files. The issue affects both GitLab CE and EE editions. A patch is available to address this vulnerability.