CVE-2023-4522

Summary

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit.

Affected Software

Weaknesses

• CWE-1287: CWE-1287: Improper Validation of Specified Type of Input

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.com/gitlab-org/gitlab/-/issues/406817
• https://hackerone.com/reports/1937213
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/

References

• https://gitlab.com/gitlab-org/gitlab/-/issues/406817
• https://hackerone.com/reports/1937213

• ←Previous
• Next→