← All credits
Thanks ledz1996 for reporting this vulnerability through our HackerOne bug bounty program
2 vulnerability records and advisories credit this contributor.
CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9.
CVE-2021-22190
A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token