GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import.
References
Link | Resource |
---|---|
https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/ | Mitigation Release Notes Vendor Advisory |
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-08-14 21:29
Updated : 2024-02-04 19:29
NVD link : CVE-2017-12426
Mitre link : CVE-2017-12426
CVE.ORG link : CVE-2017-12426
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-20
Improper Input Validation