Unscored CVE-2019-15575 EUVD-2019-6543GHSA-55ff-j47x-6xcq

A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API throug…

Published Dec 18, 2019 · Updated Aug 5, 2024 · Assigned by hackerone

Description

A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API through the blobs scope.

Affected products

Vendor	Product	Affected	Fixed
—	GitLab CE/EE	12.3.2, 12.2.6, and 12.1.12	—

References

https://hackerone.com/reports/682442