Critical · published April 23, 2021
CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 A crafty attacker can execute commands remotely just by uploading a malicious image! This vulnerability in GitLab CE/EE affects all versions from 11.9 onwards and it’s a serious one! 🔥 Think of it like a restaurant that doesn’t check the ingredients of a dish before serving it. If someone sneaks in a dangerous ingredient, it could ruin the entire meal for everyone! An attacker could take full control of your GitLab instance, altering data, exfiltrating sensitive information, or launching further attacks on your network — all thanks to a seemingly innocent image file. This is absolutely devastating for any organization relying on GitLab for their projects!
Think of it like a restaurant that doesn’t check the ingredients of a dish before serving it. If someone sneaks in a dangerous ingredient, it could ruin the entire meal for everyone! This vulnerability arises because GitLab fails to properly validate image files sent to its file parser, allowing attackers to execute arbitrary commands on the server.
An attacker could take full control of your GitLab instance, altering data, exfiltrating sensitive information, or launching further attacks on your network — all thanks to a seemingly innocent image file. This is absolutely devastating for any organization relying on GitLab for their projects! Patch GitLab immediately to version 13.12.4, 14.0.2, or later. Additionally, audit your file upload functionality to ensure proper validation of image files to prevent similar exploits. Don't forget to check user permissions as well! You’ve got this! By taking action now, you can secure your GitLab instance and put on your security hero cape! 🦸
| Product | Versions | Fixed in |
|---|---|---|
| gitlab/gitlab | ≥ 11.9.0, < 13.8.8 | 13.8.8 |
| gitlab/gitlab | ≥ 11.9.0, < 13.8.8 | 13.8.8 |
| gitlab/gitlab | ≥ 13.9.0, < 13.9.6 | 13.9.6 |
| gitlab/gitlab | ≥ 13.9.0, < 13.9.6 | 13.9.6 |
| gitlab/gitlab | ≥ 13.10.0, < 13.10.3 | 13.10.3 |
| gitlab/gitlab | ≥ 13.10.0, < 13.10.3 | 13.10.3 |