Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.
CVSS v3.0 Score
7.5
/ 10.0
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Information
- Published
- 21 mars 2018
- Updated
- 21 nov. 2024
- Status
- Modified
- Source
- support@hackerone.com
Affected products
gitlab gitlab
Versions : 9.5.10, 10.1.5, 10.2.5, 10.3.3
Weaknesses (CWE)
CWE-89CWE-89
References (4)
- https://hackerone.com/reports/298176Permissions Required
- https://hackerone.com/reports/298176Permissions Required
Similar CVEs
Other vulnerabilities of type CWE-89
Loading…
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.