First published: Wed Mar 21 2018(Updated: )
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/gitlab | 16.0.8+ds1-2 | |
GitLab GitLab | >=8.8.0<=10.1.5 | |
GitLab GitLab | >=8.8.0<=10.1.5 | |
GitLab GitLab | >=10.2.0<=10.2.5 | |
GitLab GitLab | >=10.2.0<=10.2.5 | |
GitLab GitLab | >=10.3.0<=10.3.3 | |
GitLab GitLab | >=10.3.0<=10.3.3 | |
Debian Debian Linux | =9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.