CVE-2019-6783: Path Traversal
Published Sep 9, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a directory traversal vulnerability that could lead to remote command execution.
Affected Software
6 affected components
GitLab GitLab>=8.3.0<11.5.8
GitLab GitLab>=8.17.0<11.5.8
GitLab GitLab>=11.6.0<11.6.6
GitLab GitLab>=11.6.0<11.6.6
GitLab GitLab>=11.7.0<11.7.1
GitLab GitLab>=11.7.0<11.7.1
Event History
Sep 9, 2019
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-6783?
CVE-2019-6783 has a high severity level due to its potential for remote command execution.
2
How do I fix CVE-2019-6783?
To mitigate CVE-2019-6783, upgrade GitLab to versions 11.5.8, 11.6.6, or 11.7.1 or later.
3
Which versions of GitLab are affected by CVE-2019-6783?
CVE-2019-6783 affects GitLab Community and Enterprise Editions prior to versions 11.5.8, 11.6.6, and 11.7.1.
4
What types of attacks can CVE-2019-6783 facilitate?
CVE-2019-6783 can allow attackers to perform directory traversal attacks leading to remote command execution.
5
Is CVE-2019-6783 publicly disclosed?
Yes, CVE-2019-6783 has been publicly disclosed along with details about its impact and remediation.