critical9.8
CVE-2018-14364
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant …
Impact
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | before 10.7.7 from 10.8.0 before 10.8.6 from 11.0 before 11.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/2018/07/17/critical-security-release-gitlab-11-dot-0-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ce/issues/49133
- https://hackerone.com/reports/378148
- https://about.gitlab.com/2018/07/17/critical-security-release-gitlab-11-dot-0-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ce/issues/49133
- https://hackerone.com/reports/378148