CVE-2017-0917

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.

Score

CVSS 3.0 6.1 Medium

Status

Modified - support@hackerone.com

Published

2018-03-21

Last modified

2024-08-05

Weaknesses

CWE-20, CWE-79

Affected products

• Debian Linux (Debian)
• Gitlab (Gitlab)
• Gitlab Community And Enterprise Editions (Gitlab)

References

• https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
• https://hackerone.com/reports/299525
• https://www.debian.org/security/2018/dsa-4145