CVE-2018-16051 (NVD)

2018-10-03

An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Orphaned Upload Files Exposure.

Products Gitlab
Type Information Exposure (CWE-200)
First patch - None (likely due to unavailable code)
Links https://gitlab.com/gitlab-org/gitlab-ee/issues/6012
https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/