CVE-2020-13347
Description
A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKER_AUTH_CONFIG build variable.
Summary dbcve.org
Command injection vulnerability in GitLab Runner on Windows systems with docker executor. The DOCKER_AUTH_CONFIG build variable is not properly sanitized, allowing attackers to inject arbitrary commands that execute on the Windows host system with the privileges of the GitLab Runner service.
Mitigation
Upgrade GitLab Runner to version 13.2.4, 13.3.2, or 13.4.1 or later. As a defense-in-depth measure, restrict who can modify CI/CD pipeline variables and consider using GitLab's protected variables feature.