Launchpad.net

CVE 2018-20229

GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.

See the CVE page on Mitre.org for more details.