gitlab-org/gitlab-workhorse

gitlab-org/gitlab-workhorse

Releases244

Frequency1 week 1 day

Last Release over 5 years ago

Stars116

Handles slow HTTP requests for GitLab

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-6786 ↗	Sep 9, 2019Monday, 9 September 2019, 20:15	6.5 MEDIUM	4 MEDIUM
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 1 of 3). The contents of an LFS object can be accessed by an unauthorized user, if the file size and OID are known.
CVE-2018-19583 ↗	Jul 10, 2019Wednesday, 10 July 2019, 17:15	6.5 MEDIUM	4 MEDIUM
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.