Skip to content

Known vulnerabilities in GitLab Community and Enterprise Editions

Is your version affected?

CVE Summary Score Published
CVE-2017-0920 GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass… Not rated Mar 22, 2018
CVE-2018-3710 Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project… Not rated Mar 21, 2018
CVE-2017-0918 Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component… Not rated Mar 21, 2018
CVE-2017-0917 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in… Not rated Mar 21, 2018
CVE-2017-0927 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys… Not rated Mar 21, 2018
CVE-2017-0916 Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue… Not rated Mar 21, 2018
CVE-2017-0926 Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component… Not rated Mar 21, 2018
CVE-2017-0915 Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService… Not rated Mar 21, 2018
CVE-2017-0925 Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project… Not rated Mar 21, 2018
CVE-2017-0914 Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the… Not rated Mar 21, 2018
CVE-2017-0924 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in… Not rated Mar 21, 2018
CVE-2017-0923 Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component… Not rated Mar 21, 2018
CVE-2017-0922 Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab… Not rated Mar 21, 2018

Other GitLab products