CVE-2017-0914

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting i...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory about.gitlab.com
report hackerone.com