CVE-2018-19572 | BDVDB-2026-118945 Detail

Description#

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-07-10Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.