Lucene search

CVE-2017-0916

🗓️ 21 Mar 2018 20:00:29Reported by hackeroneType

Gitlab Community Edition version 10.3 remote code execution vulnerability

Reporter	Title	Published	Views	Family All 12
Cvelist	CVE-2017-0916	21 Mar 201820:00	–	cvelist
Hacker One	GitLab: Evaluating Ruby code by injecting Rescue job on the system_hook_push queue through web hook	19 Dec 201721:08	–	hackerone
UbuntuCve	CVE-2017-0916	21 Mar 201800:00	–	ubuntucve
Debian CVE	CVE-2017-0916	21 Mar 201820:29	–	debiancve
NVD	CVE-2017-0916	21 Mar 201820:29	–	nvd
Prion	Remote code execution	21 Mar 201820:29	–	prion
OSV	CVE-2017-0916	21 Mar 201820:29	–	osv
OSV	gitlab - security update	18 Mar 201800:00	–	osv
OpenVAS	GitLab 8.8.x - 10.1.5, 10.2.x - 10.2.5, 10.3.x - 10.3.3 Multiple Vulnerabilities	28 Mar 202200:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-4145-1)	17 Mar 201800:00	–	openvas

Nvd

Vulners

Node

gitlab gitlabRange8.8.0–10.1.5community

gitlab gitlabRange8.8.0–10.1.5enterprise

gitlab gitlabRange10.2.0–10.2.5community

gitlab gitlabRange10.2.0–10.2.5enterprise

gitlab gitlabRange10.3.0–10.3.3community

gitlab gitlabRange10.3.0–10.3.3enterprise

Node

debian debian_linuxMatch9.0

[
  {
    "product": "GitLab Community and Enterprise Editions",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.0 - 10.1.5 Fixed in 10.1.6"
      },
      {
        "status": "affected",
        "version": "10.2.0 - 10.2.5 Fixed in 10.2.6"
      },
      {
        "status": "affected",
        "version": "10.3.0 - 10.3.3 Fixed in 10.3.4"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2018/dsa-4145
about	www.about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
hackerone	www.hackerone.com/reports/299473

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Mar 2018 20:29Current

8.8High risk

Vulners AI Score8.8

CVSS27.5

CVSS39.8

EPSS0.038