CVE-2018-20229: Path Traversal
Published Apr 4, 2019
·Updated
GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
Affected Software
6 affected components
GitLab GitLab<11.3.14
GitLab GitLab<11.3.14
GitLab GitLab>=11.4.0<11.4.12
GitLab GitLab>=11.4.0<11.4.12
GitLab GitLab>=11.5.0<11.5.5
GitLab GitLab>=11.5.0<11.5.5
Event History
Apr 4, 2019
CVE Published
via MITRE·04:54 PM
Data Sourced
via MITRE·04:54 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20229?
CVE-2018-20229 is classified as a critical vulnerability due to its potential for directory traversal attacks.
2
How do I fix CVE-2018-20229?
To resolve CVE-2018-20229, you should update to GitLab versions 11.3.14, 11.4.12, or 11.5.5 or later.
3
What versions of GitLab are affected by CVE-2018-20229?
CVE-2018-20229 affects GitLab Community and Enterprise Editions prior to versions 11.3.14, 11.4.12, and 11.5.5.
4
What kind of attack does CVE-2018-20229 facilitate?
CVE-2018-20229 allows for directory traversal attacks, which can expose sensitive files on the server.
5
Is CVE-2018-20229 a known vulnerability?
Yes, CVE-2018-20229 is a publicly known vulnerability that has been documented and reported.