CVE-2017-0918

CWE-23CWE-22 — Path Traversal6 documents6 sources
Severity
8.8HIGH
EPSS
6.2%
top 9.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Gitlab GitlabGitlab Gitlab Community AND Enterprise EditionsDebian Debian Linux
Timeline
PublishedMar 21
Latest updateMay 13

Description

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5gitlab/gitlab_community_and_enterprise_editions10.2.0 - 10.2.5 Fixed in 10.2.6, 10.3.0 - 10.3.3 Fixed in 10.3.4, 8.4.0 - 10.1.5 Fixed in 10.1.6+2
▶NVDgitlab/gitlab8.4.0 — 9.5.10+6

Also affects: Debian Linux 9.0

🔴Vulnerability Details

3
GHSA
GHSA-cv6r-jfw8-2rmq: Gitlab Community Edition version 10↗2022-05-13
▶
OSV
CVE-2017-0918: Gitlab Community Edition version 10↗2018-03-21
▶
CVEList
CVE-2017-0918: Gitlab Community Edition version 10↗2018-03-21
▶

📋Vendor Advisories

2
GitLab
CVE-2017-0918: Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.↗2018-03-21
▶
Debian
CVE-2017-0918: gitlab - Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in...↗2017
▶
CVE-2017-0918 (HIGH CVSS 8.8) | Gitlab Community Edition version 10 | cvebase.io