CVE-2019-9222: Path Traversal
Published Apr 17, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.
Affected Software
6 affected components
GitLab GitLab<11.6.10
GitLab GitLab<11.6.10
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.8.0<11.8.1
GitLab GitLab>=11.8.0<11.8.1
Event History
Apr 17, 2019
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9222?
CVE-2019-9222 is classified as a medium severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2019-9222?
To fix CVE-2019-9222, upgrade GitLab to version 11.6.10, 11.7.6, or 11.8.1 or later.
3
What types of GitLab editions are affected by CVE-2019-9222?
CVE-2019-9222 affects both GitLab Community and Enterprise Editions prior to the specified versions.
4
What is the nature of the vulnerability in CVE-2019-9222?
CVE-2019-9222 involves insecure permissions that could allow unauthorized users to access sensitive information.
5
Are there any known exploits for CVE-2019-9222?
As of now, there are no public exploits reported specifically targeting CVE-2019-9222.