CVE-2017-0927

2018-03-2120:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

21.9%

JSON

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

CPENameOperatorVersion
gitlabeq10.3.1-ee
gitlabeq10.3.0-ee
gitlabeq10.2.4-ee
gitlabeq10.2.4
gitlabeq10.2.5-ee
gitlabeq10.3.1
gitlabeq10.3.2
gitlabeq10.2.1
gitlabeq10.3.0-rc5
gitlabeq10.2.0

Name	Operator	Version
gitlab	eq	10.3.1-ee
gitlab	eq	10.3.0-ee
gitlab	eq	10.2.4-ee
gitlab	eq	10.2.4
gitlab	eq	10.2.5-ee
gitlab	eq	10.3.1
gitlab	eq	10.3.2
gitlab	eq	10.2.1
gitlab	eq	10.3.0-rc5
gitlab	eq	10.2.0