CVE-2020-10086

Name of the Vulnerable Software and Affected Versions GitLab versions 10.4 through 12.8.1

Description The issue allows Directory Traversal, which leads to arbitrary file read. A particular endpoint was vulnerable to a directory traversal vulnerability.

Recommendations For GitLab versions 10.4 through 12.8.1, update to a version that contains a fix for this issue to prevent arbitrary file read. As a temporary workaround, consider restricting access to the vulnerable endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.