Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2018-3710 — HIGH severity vulnerability | Release Alert

CVE-2018-3710

7.8

HIGHCVSS v3

Published

March 21, 2018

CVSS v2

6.8 MEDIUM

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

semantic-release/gitlab

More on this CVE

NVD↗GitHub Advisory↗

GitHub:fox_face: semantic-release plugin to publish a GitLab release

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

gitlab

Crates.ioGitlab API client.

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

>= 8.9.0, <= 9.5.10, >= 10.0.0, <= 10.1.5, >= 10.0.0, <= 10.1.15, >= 10.2.0, <= 10.2.5, > 10.2.0, <= 10.2.5, >= 10.3.0, <= 10.3.3, > 10.3.0, <= 10.3.3NVD