Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2017-0918 — MEDIUM severity vulnerability | Release Alert

CVE-2017-0918

6.5

MEDIUMCVSS v2

Published

March 21, 2018

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

semantic-release/gitlab

More on this CVE

NVD↗GitHub Advisory↗

GitHub:fox_face: semantic-release plugin to publish a GitLab release

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

gitlab

Crates.ioGitlab API client.

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

>= 8.4.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD