Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-0914

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab Community and Enterprise Editions

  • 9.1.0 - 10.1.5 Fixed in 10.1.6affected
  • 10.2.0 - 10.2.5 Fixed in 10.2.6affected
  • 10.3.0 - 10.3.3 Fixed in 10.3.4affected

References