medium6.5
CVE-2017-11437
GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirr…
Impact
GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | Versions 8.5.0, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5 |