CVE-2018-14364

7.5

HIGHCVSS v2

Published

July 18, 2018

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant remote code execution via the GitLab projects import component.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

gitlab

Crates.ioGitlab API client.

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

< 10.7.7, >= 11.0, < 11.0.4, >= 10.8.0, < 10.8.6NVD

Security Advisories

CVE-2018-14364

Description

More on this CVE