Threats tagged 'ghsa-9hj5-r43h-h3xg'

A critical vulnerability in GitLab Community Edition and Enterprise Edition versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 allows unauthenticated users to execute arbitrary code on the GitLab server. This occurs due to insufficient validation of specially crafted regular expressions in CI/CD configurations. The vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild. GitLab has released fixes in versions 19.2.8, 19.3.5, and 19.4.2 to address this issue.