CVE-2019-12430

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition version 11.11

Description: An issue allows an authenticated malicious user to execute commands remotely through the repository download feature, enabling Command Injection. This is possible with a specially crafted payload.

Recommendations: For GitLab Community and Enterprise Edition version 11.11, update to a version that includes a fix for this issue to prevent command injection attacks. As a temporary workaround, consider restricting access to the repository download feature to minimize the risk of exploitation.