An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 11.3.0 (including) | 12.5.9 (excluding) |
| Gitlab | Gitlab | 12.6.0 (including) | 12.6.6 (excluding) |
| Gitlab | Gitlab | 12.7.2 (including) | 12.7.4 (excluding) |