Non notée
CVE-2017-0917 Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in…
Description
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab Community and Enterprise Editions | Versions non publiées |
Références
- DSA-4145 www.debian.org
- hackerone.com hackerone.com
- about.gitlab.com about.gitlab.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab Community and Enterprise Editions
Les 13 CVE de GitLab Community and Enterprise Editions →
CVE-2017-0920
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass…
Non notée
CVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys…
Non notée
CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component…
Non notée
CVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue…
Non notée