GitLab Competitive Conditions Vulnerability

GitLab is a Ruby on Rails development , Git version control system project repository application . The program can be used to access the contents of the project's files, commit history, bug lists, and more. A competitive conditions vulnerability exists in GitLab versions 8.17 and later Community...

CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

PT-2019-9855

Name of the Vulnerable Software and Affected Versions GitLab CE versions 8.17 through 11.5.0 GitLab EE versions 8.3 through 11.4.7 GitLab EE versions 8.3 through 11.3.10 Description The issue is related to a symlink time-of-check-to-time-of-use race condition. This condition could allow...