GitLab Community and Enterprise Editions Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.9.0, < 13.8.8≥ 13.10.0, < 13.10.3≥ 13.9.0, < 13.9.6 | 13.8.813.10.313.9.6 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free