{"id":12785,"date":"2021-03-22T09:25:41","date_gmt":"2021-03-22T09:25:41","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=12785"},"modified":"2026-04-17T18:07:46","modified_gmt":"2026-04-17T18:07:46","slug":"gitlab-remote-code-execution-vulnerability-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/gitlab-remote-code-execution-vulnerability-threat-alert\/","title":{"rendered":"GitLab Remote Code Execution Vulnerability Threat Alert"},"content":{"rendered":"\n

Vulnerability Description<\/h2>\n\n\n\n

On March 19, 2021, NSFOCUS detected that GitLab released patches for a code execution vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE), which was assigned a CVSS base score of 9.9. Unauthorized authenticated attackers could craft malicious requests via controllable markdown rendering options, thereby executing arbitrary code on the server.<\/p>\n\n\n\n

GitLab is an open-source project for warehouse management systems. Using Git as a code management tool, it can access public or private projects through a web-based manager.<\/p>\n\n\n\n

Reference link: https:\/\/about.gitlab.com\/releases\/2021\/03\/17\/security-release-gitlab-13-9-4-released\/<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected Versions<\/strong><\/strong><\/p>\n\n\n\n