CVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting i...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.
参照URL
- advisory about.gitlab.com
- advisory debian.org
- report hackerone.com