CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

Security feature bypass

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

CVE-2016-9086 affects GitLab (CE/EE) versions 8.9.x to 8.13.x with the import/export project feature. The vulnerability arises from improper validation of symbolic links in user-supplied tar archives during export/import, enabling an authenticated user to access files reachable by the GitLab serv...