CVE-2017-0914
21.03.2018, 20:29
Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 9.4.0 ≤ 𝑥 ≤ 9.5.10 |
| gitlab | gitlab | 9.4.0 ≤ 𝑥 ≤ 9.5.10 |
| gitlab | gitlab | 10.0.0 ≤ 𝑥 ≤ 10.1.5 |
| gitlab | gitlab | 10.0.0 ≤ 𝑥 ≤ 10.1.5 |
| gitlab | gitlab | 10.2.0 ≤ 𝑥 ≤ 10.2.5 |
| gitlab | gitlab | 10.2.0 ≤ 𝑥 ≤ 10.2.5 |
| gitlab | gitlab | 10.3.0 ≤ 𝑥 ≤ 10.3.3 |
| gitlab | gitlab | 10.3.0 ≤ 𝑥 ≤ 10.3.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases