GitLab Arbitrary File Overwrite via Shared Folder Upload leading to RCE

Vulnerability Overview Vulnerability Name: Unrestricted File Overwrite via Enabled Uploaded Folder Sharing Vulnerability Description: This vulnerability allows an attacker to overwrite arbitrary files by uploading through enabled folder sharing. Attackers can exploit this vulnerability to upload malicious files, thereby executing arbitrary code on the server or performing other malicious operations. Scope of Impact: Affected Versions: - Affected versions include: - 13.10.0 to 13.10.4 - 13.10.0 to 13.10.4 - 13.11.0 to 13.11.4 - 13.11.0 to 13.11.4 - 13.12.0 to 13.12.4 - 13.12.0 to 13.12.4 - 13.13.0 to 13.13.4 - 13.13.0 to 13.13.4 - 13.14.0 to 13.14.4 - 13.14.0 to 13.14.4 - 13.15.0 to 13.15.4 - 13.15.0 to 13.15.4 - 13.16.0 to 13.16.4 - 13.16.0 to 13.16.4 - 13.17.0 to 13.17.4 - 13.17.0 to 13.17.4 - 13.18.0 to 13.18.4 - 13.18.0 to 13.18.4 - 13.19.0 to 13.19.4 - 13.19.0 to 13.19.4 - 13.20.0 to 13.20.4 - 13.20.0 to 13.20.4 - 13.21.0 to 13.21.4 - 13.21.0 to 13.21.4 - 13.22.0 to 13.22.4 - 13.22.0 to 13.22.4 - 13.23.0 to 13.23.4 - 13.23.0 to 13.23.4 - 13.24.0 to 13.24.4 - 13.24.0 to 13.24.4 - 13.25.0 to 13.25.4 - 13.25.0 to 13.25.4 - 13.26.0 to 13.26.4 - 13.26.0 to 13.26.4 - 13.27.0 to 13.27.4 - 13.27.0 to 13.27.4 - 13.28.0 to 13.28.4 - 13.28.0 to 13.28.4 - 13.29.0 to 13.29.4 - 13.29.0 to 13.29.4 - 13.30.0 to 13.30.4 - 13.30.0 to 13.30.4 - 13.31.0 to 13.31.4 - 13.31.0 to 13.31.4 - 13.32.0 to 13.32.4 - 13.32.0 to 13.32.4 - 13.33.0 to 13.33.4 - 13.33.0 to 13.33.4 - 13.34.0 to 13.34.4 - 13.34.0 to 13.34.4 - 13.35.0 to 13.35.4 - 13.35.0 to 13.35.4 - 13.36.0 to 13.36.4 - 13.36.0 to 13.36.4 - 13.37.0 to 13.37.4 - 13.37.0 to 13.37.4 - 13.38.0 to 13.38.4 - 13.38.0 to 13.38.4 - 13.39.0 to 13.39.4 - 13.39.0 to 13.39.4 - 13.40.0 to 13.40.4 - 13.40.0 to 13.40.4 - 13.41.0 to 13.41.4 - 13.41.0 to 13.41.4 - 13.42.0 to 13.42.4 - 13.42.0 to 13.42.4 - 13.43.0 to 13.43.4 - 13.43.0 to 13.43.4 - 13.44.0 to 13.44.4 - 13.44.0 to 13.44.4 - 13.45.0 to 13.45.4 - 13.45.0 to 13.45.4 - 13.46.0 to 13.46.4 - 13.46.0 to 13.46.4 - 13.47.0 to 13.47.4 - 13.47.0 to 13.47.4 - 13.48.0 to 13.48.4 - 13.48.0 to 13.48.4 - 13.49.0 to 13.49.4 - 13.49.0 to 13.49.4 - 13.50.0 to 13.50.4 - 13.50.0 to 13.50.4 - 13.51.0 to 13.51.4 - 13.51.0 to 13.51.4 - 13.52.0 to 13.52.4 - 13.52.0 to 13.52.4 - 13.53.0 to 13.53.4 - 13.53.0 to 13.53.4 - 13.54.0 to 13.54.4 - 13.54.0 to 13.54.4 - 13.55.0 to 13.55.4 - 13.55.0 to 13.55.4 - 13.56.0 to 13.56.4 - 13.56.0 to 13.56.4 - 13.57.0 to 13.57.4 - 13.57.0 to 13.57.4 - 13.58.0 to 13.58.4 - 13.58.0 to 13.58.4 - 13.59.0 to 13.59.4 - 13.59.0 to 13.59.4 - 13.60.0 to 13.60.4 - 13.60.0 to 13.60.4 - 13.61.0 to 13.61.4 - 13.61.0 to 13.61.4 - 13.62.0 to 13.62.4 - 13.62.0 to 13.62.4 - 13.63.0 to 13.63.4 - 13.63.0 to 13.63.4 - 13.64.0 to 13.64.4 - 13.64.0 to 13.64.4 - 13.65.0 to 13.65.4 - 13.65.0 to 13.65.4 - 13.66.0 to 13.66.4 - 13.66.0 to 13.66.4 - 13.67.0 to 13.67.4 - 13.67.0 to 13.67.4 - 13.68.0 to 13.68.4 - 13.68.0 to 13.68.4 - 13.69.0 to 13.69.4 - 13.69.0 to 13.69.4 - 13.70.0 to 13.70.4 - 13.70.0 to 13.70.4 - 13.71.0 to 13.71.4 - 13.71.0 to 13.71.4 - 13.72.0 to 13.72.4 - 13.72.0 to 13.72.4 - 13.73.0 to 13.73.4 - 13.73.0 to 13.73.4 - 13.74.0 to 13.74.4 - 13.74.0 to 13.74.4 - 13.75.0 to 13.75.4 - 13.75.0 to 13.75.4 - 13.76.0 to 13.76.4 - 13.76.0 to 13.76.4 - 13.77.0 to 13.77.4 - 13.77.0 to 13.77.4 - 13.78.0 to 13.78.4 - 13.78.0 to 13.78.4 - 13.79.0 to 13.79.4 - 13.79.0 to 13.79.4 - 13.80.0 to 13.80.4 - 13.80.0 to 13.80.4 - 13.81.0 to 13.81.4 - 13.81.0 to 13.81.4 - 13.82.0 to 13.82.4 - 13.82.0 to 13.82.4 - 13.83.0 to 13.83.4 - 13.83.0 to 13.83.4 - 13.84.0

Goal Reached Thanks to every supporter — we hit 100%!

GitLab Arbitrary File Overwrite via Shared Folder Upload leading to RCE

More from this source