high7.8
CVE-2018-3710
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execu…
Impact
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 8.9.0 through 9.5.10 from 10.0.0 through 10.1.5 from 10.0.0 through 10.1.15 after 10.2.0 through 10.2.5 from 10.2.0 through 10.2.5 after 10.3.0 through 10.3.3 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://gitlab.com/gitlab-com/infrastructure/issues/3510
- https://gitlab.com/gitlab-org/gitlab-ce/issues/41757
- https://hackerone.com/reports/302959
- https://www.debian.org/security/2018/dsa-4145
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://gitlab.com/gitlab-com/infrastructure/issues/3510
- https://gitlab.com/gitlab-org/gitlab-ce/issues/41757
- https://hackerone.com/reports/302959
- https://www.debian.org/security/2018/dsa-4145