NetSight
medium6.5

CVE-2017-0927

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deploy…

Impact

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.16.0 through 9.5.10
from 10.0.0 through 10.1.5
from 10.2.0 through 10.2.5
from 10.3.0 through 10.3.3

Weakness classification

References