CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the…

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00925 · 60.1th percentile
Published
2019-07-10T15:32Z
EPSS history
Timeline
  • 10 JUL 15:32Z
    GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the…
    cvelistv5