CVE-2017-0927

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

Score

CVSS 3.0 6.5 Medium

Status

Modified - support@hackerone.com

Published

2018-03-21

Last modified

2024-08-05

Weaknesses

CWE-285, CWE-863

Affected products

• Gitlab (Gitlab)
• Gitlab Community And Enterprise Editions (Gitlab)

References

• https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
• https://gitlab.com/gitlab-org/gitlab-ce/issues/37594