An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, allowed an authenticated attacker to craft image urls which bypass the asset proxy.
Solution:
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
Link | Tags |
---|---|
https://gitlab.com/gitlab-org/gitlab/-/issues/419213 | vendor advisory issue tracking |
https://hackerone.com/reports/2071411 | broken link exploit permissions required technical description |