GitLab 11.2.x - 11.2.6, 11.3.x - 11.3.7, 11.4.x - 11.4.2 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

CVE-2018-18648

CVE-2018-18648 affects GitLab Community and Enterprise Edition older than 11.4.3. The issue is an information disclosure where a JSON endpoint exposed gem version information, enabling attackers to discover vulnerable gems on a specific GitLab instance. Affected branches include 11.2.x, 11.3.x, a...