CVE-2017-11437

GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2017-08-02

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Gitlab (Gitlab)

References

• https://about.gitlab.com/2017/07/19/gitlab-9-dot-3-dot-8-released/