CVE-2017-0918
CVE-2017-0918
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.
CVSS 8.8 · High · EPSS 4.3%
- Published
- Updated
Stack: system
Affected products and versions
gitlab community and enterprise editions
- Versions
- 8.4.0 - 10.1.5 Fixed in 10.1.6: Affected
- 10.2.0 - 10.2.5 Fixed in 10.2.6: Affected
- 10.3.0 - 10.3.3 Fixed in 10.3.4: Affected
No fix published
gitlab Ubuntu:16.04:LTS
- Versions
- 8.4.3+dfsg-9
- 8.4.3+dfsg-12
- 8.5.8+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published