medium6.3
CVE-2017-11438
GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add the…
Impact
GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | Versions 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5 |