← CVE Intelligence

CVE-2024-2434

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 16.9 before 16.9.6; affected 16.10 before 16.10.4; affected 16.11 before 16.11.1

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.