Launchpad.net

CVE 2020-7966

GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.

See the CVE page on Mitre.org for more details.