Loading HuntDB...

GHSA-jg4r-vvqm-988m

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Affected versions are >=12.8, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.

Related CVEs

Key Information

GHSA ID
GHSA-jg4r-vvqm-988m
Published
May 24, 2022 5:34 PM
Last Modified
May 24, 2022 5:34 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 15, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.