Total vulnerabilities in the database
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 12.0.0 | 12.0.4 |
| gitlab / gitlab | 12.1.0 | 12.1.2 |
| gitlab / gitlab | 11.11.0 | 11.11.6 |