CVE-2018-18649 — Gitlab vulnerability

4 documents4 sources

Severity

9.8CRITICALNVD

EPSS

55.0%

top 1.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gitlab Debian Gitlab

Timeline

PublishedNov 29

Latest updateMay 13

Description

An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶NVDgitlab/gitlab11.3.0 — 11.3.8+1

▶debiandebian/gitlab

▶gitlabgitlab/gitlab

🔴Vulnerability Details

GHSA

GHSA-25vj-3rcx-m63h: An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11↗2022-05-13

▶

📋Vendor Advisories

GitLab

CVE-2018-18649: An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It a↗2018-11-29

▶

Debian

CVE-2018-18649: gitlab - An issue was discovered in the wiki API in GitLab Community and Enterprise Editi...↗2018

▶